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GAO REPORT ON HIGH PERFORMANCE 
COMPUTERS 


WEDNESDAY, SEPTEMBER 16, 1998 


U.S. Senate, 

Subcommittee on International Security, 
Proliferation, and Federal Services, 

OF THE Committee on Governmental Affairs, 

Washi ngton, DC. 

The Subcommittee met, pursuant to notice, at 2 p.m. in room 
342, Senate Dirksen Building, Hon. Thad Cochran, Chairman of 
the Subcommittee, presiding. 

Present: Senators Cochran, Levin, and Thompson [ex officio]. 

OPENING STATEMENT OF SENATOR COCHRAN 

Senator Cochran. The Subcommittee will come to order. I apolo- 
gize for the delay in convening the hearing. We appreciate very 
much the attendance of our witnesses and welcome everyone to 
this hearing of our Subcommittee on International Security, Pro- 
liferation, and Federal Services. 

Today we are reviewing a report by the General Accounting Of- 
fice on the administration's 1995 decision to liberalize export con- 
trols on high performance computers, known as "HPCs," or "super- 
computers." 

In October 1995, President Clinton announced a broad decontrol 
of HPCs, which subsequently reduced the number of individual li- 
censes granted for supercomputer exports by almost 90 percent. 

After learning that the Russian and Chinese nuclear weapons 
complexes had obtained American supercomputers following the 
administration's change in policy. Congress acted last year to en- 
sure that the Federal Government would have a greater role in de- 
termining who would be using exported high performance com- 
puters and how they would be used in certain foreign countries 
that pose proliferation threats. 

At the same time, I asked the General Accounting Office to study 
the analysis on which the administration based its 1995 decision 
to liberalize high performance computer export controls, and to as- 
sess the soundness of the administration's current policy. This 
study can also serve as a basis for analyzing any future adminis- 
tration proposals to decontrol supercomputer exports. 

Our witnesses today include Harold J ohnson. Associate Director, 
General Accounting Office for International Relations and Trade 

( 1 ) 
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Issues, who will present the GAO's reports He is joined at the wit- 
ness table by two of his associates from GAO who directed this 
study, J ames Shafer and J effrey Phillips. 

We also have with us today Commerce Under Secretary William 
Reinsch, who will respond with the administration's view of the 
GAO report. 

I am happy to yield to the distinguished Chairman of the Gov- 
ernmental Affairs Committee, Senator Thompson, for any com- 
ments or remarks he would like to make. 

Senator Thompson. Thank you, Mr. Chairman. I think I'll wait 
and follow regular order. 

I do have to leave in about 25 mintues for a downtown meeting, 
but if we can follow the regular order, then I think I can get my 
questions in. Thank you very much. 

Senator Cochran. Thank you. Senator. 

Let me ask the Associate Director of the General Accounting Of- 
fice, Harold J ohnson, to proceed. 

STATEMENT OF HAROLD J . J OH NSON,^ ASSOCIATE DIRECTOR, 

INTERNATIONAL RELATIONS AND TRADE ISSUES, U.S. GEN- 
ERAL ACCOUNTING OFFICE, ACCOMPANIED BY JAMES 

SHAFER, NATIONAL SECURITY AND INTERNATIONAL AF- 
FAIRS DIVISION AND JEFFREY D. PHILLIPS, NATIONAL SE- 
CURITY AND INTERNATIONAL AFFAIRS DIVISION 

Mr. Johnson. Thank you very much, Mr. Chairman. We are 
pieased to be here to discuss the export controis on high perform- 
ance computers. 

As you mentioned, you had expressed concern about saies to Rus- 
sia and China and asked us to do an assessment of the basis for 
the Executive Branch's revision to HPC export controis, and to 
identify changes in iicensing activities and export enforcement re- 
quirements resuiting from these revisions. 

You aiso asked us to determine the current foreign avaiiabiiity 
of HPCs, particuiariy for countries of nationai security concern. 

Because the uniicensed exports to Russia and China that you 
mentioned were under investigation by Commerce, J ustice, and 
Customs Service, we did not specificaiiy address this matter in our 
assessment. Aiso, i wouid iike to point out that our examination 
did not determine the appropriate threshoid ieveis for controiiing 
HPCs. instead, as you requested, we evaiuated the process by 
which the Executive Branch made its decision and the adequacy of 
the information avaiiabiefor that purpose. 

Our report on the decision to revise export controis is being re- 
ieased today, as is our companion report responding to a require- 
ment of the fiscai year 1998 Nationai Defense Authorization Act. 
Therefore, my prepared statement is fairiy short and i wiii summa- 
rize our principai findings. But first, i think a iittie background 
might be usefui. 

As we have stated in previous testimony, the U.S. export controi 
system is basicaiiy about managing risk. Exports to some countries 


iQAO report entitled "Export Controls: Information on the Decision to Revise High Perform- 
ance Computer Controls," September 1998, GAO/NSIAD-98-196, submitted by M r. J ohnson, ap- 
pears in the Appendix on pa^ 54. 

2The prepared statement of M r. J ohnson appears in the Appendix on page 41. 
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involve less risk than to other countries, and exports of some items 
involve less risk than others. The President has the responsibility 
and the authority to control and require licenses for the export of 
licenses that may pose a national security or foreign policy concern, 
and he may remove or revise export controls as U.S. concerns and 
interests change. It should be noted that the law does not require 
that a foreign availability analysis be performed when deciding to 
remove or relax controls. 

In 1995, the Executive Branch conducted a review of export con- 
trols on high performance computers to determine how changes in 
computer technology and its military applications should affect 
U.S. export control regulations. This review was a continuation of 
a process that had begun in the 1980's to take into account the 
technological advances m the computer industry. And I would point 
out that as recently as 1993, the export of computers with a com- 
posite theoretic performance of 195 MTOPS were controlled. This 
was raised to 1,500 MTOPS in February, so there have been 
changes as we have progressed along that timeline. 

A key element of the Executive Branch's review was a Stanford 
University study, jointly commissioned by the Departments of 
Commerce and Defense. Among other things, the Stanford report 
stated that, first, U.S.-manufactured computers with a composite 
theoretic performance of up to 4,000 to 5,000 MTOPS were cur- 
rently widely available and uncontrollable worldwide; second, that 
computers with a performance level of up to 7,000 MTOPS would 
become widely available and uncontrollable worldwide by 1997; 
and, third, that many high performance computer applications used 
in national security programs occur at about 7,000 MTOPS, or 
above 10,000 MTOPS. 

The report also stated that it would be too expensive for the gov- 
ernment and industry to effectively control exports of computing 
systems with performance below 7,000 MTOPS, and that attempts 
to control HPC exports below this level would become increasingly 
ineffectual and an unreasonable burden on the computer industry. 

In announcing its 1996 change to export controls, the Executive 
Branch stated that one goal of the revised export control was to 
permit the government to tailor the controls to levels and licensing 
conditions to the national security or proliferation risks posed at 
specific destinations. The revised export control policy removed li- 
cense requirements for most HPC exports with performance levels 
up to 2,000 MTOPS, an increase from what I mentioned previously, 
of 1,500 MTOPS. 

The policy also organized the countries into four computer tiers, 
with each tier— after tier 1— representing a successively higher 
level of concern to U.S. security interests. 

A dual control system was established for tier 3, such countries 
as Russia and China. For these countries, HPCs of up to 7,000 
MTOPS could be exported to civilian end-users without a license, 
while exports at or above 2,000 MTOPS to end-users of concern for 
military or proliferation of weapons of mass destruction reasons did 
require a license. Exports of HPCs above 7,000 MTOPS in this cat- 
egory also required a license. 

These are shown graphically in the report on page 25 for ref- 
erence. 
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TheJ anuary, 1996 regulation also made other changes. It speci- 
fied that the exporters would be responsible for determining wheth- 
er an export license is required based on the MTOPS levels of the 
computer, screening end users and end uses for military or pro- 
liferation concerns, and keeping records and reporting on exports 
of computers with performance levels of 2,000 MTOPS. 

The 1998 Defense Authorization Act modified the regulations by 
requiring exporters to notify the Commerce Department of any 
planned sales of computers with performance levels greater than 
2,000 MTOPS to tier 3 countries, and the government now has 10 
days to assess and notify the vendor whether a proposed HPC sale 
requires a license. 

The law also now requires Commerce to perform post-shipment 
verification on all HPC exports with performance levels above 
2,000 MTOPS to tier 3 countries. 

As I indicated, one focus of our work was to assess whether the 
empirical evidence presented in the Stanford study, which was a 
key element in the decision to revise HPC export controls, sup- 
ported its conclusions. Our analysis showed that it had two signifi- 
cant limitations. 

First, the study lacked empirical evidence or analysis to support 
its conclusions that HPCs were uncontrollable based on, one, world- 
wide availability, and two, insufficient resources to control them. 

Second, the study did not assess the capabilities of countries of 
concern to use HPCs for military or other national security applica- 
tions, as required by its tasking. 

The study's principal author said that the U.S. Government data 
were insufficient to make such an assessment, and the study rec- 
ommended that better data be gathered so that such an analysis 
could be done in the future. 

Except for nuclear weapons, the Executive Branch has not com- 
pleted an assessment of the national security risks of exporting 
HPCs to tier 3 countries, and the nuclear assessment was com- 
pleted by the Department of Energy in J une of this year, more 
than 2 years after the export control policy for HPCs was revised. 

The Executive Branch has identified high performance com- 
puting as having applications in such national defense areas as nu- 
clear weapons programs, cryptology, conventional weapons, and 
military operations, and with the exception of nuclear weapons, the 
Executive Branch has not identified how and at what performance 
levels specific countries of concern may use HPCs for national de- 
fense applications, an important factor in assessing the risk of the 
sales of H PCs to those countries. 

In December of last year, the House Committee on National Se- 
curity directed the Departments of Energy and Defense to make 
that assessment. DOE's study on nuclear weapons has shown that 
nuclear weapons programs in tier 3 countries, especially in China, 
India, and Pakistan, could benefit from the acquisition of HPC ca- 
pabilities. The Executive Branch has not finished identifying how 
specific countries of concern could use HPCs for non-nuclear na- 
tional defense applications. 

Based on Commerce's view of the worldwide availability of com- 
puting power and the technological advancements in this area, the 



5 


Executive Branch raised the MTOPS threshold for HPCs. The 1996 
revision to export control policies had three key consequences. 

First, by increasing the performance threshold of computers that 
require license, the 1996 revision decreased the number of license 
applications from 459 in 1995 to 125 in 1997, and of approved ex- 
port license applications for HPCs from 395 in 1995 to 42 in 1997. 

Second, as I have indicated, the revision shifted some of the gov- 
ernment's end-use screening responsibilities from the government 
to the computer industry. In essence, the exporter had to decide 
whether a license was required, since the decision is made on the 
basis of end use, the end user, and a computer's performance capa- 
bility. This decision could be particularly difficult for some tier 3 
countries like China, where identifying the distinction between a 
civilian and a military end user can be very difficult. 

I n response to several allegations of improper sales to Russia and 
China, Congress partly reversed this situation by passing the fiscal 
year 1998 National Defense Authorization Act, which requires ex- 
porters to notify Commerce of all HPC sales over 2,000 MTOPS to 
tier 3 countries prior to their export. 

Third, the regulation required HPC manufacturers to keep 
records of end users of all HPC exports over 2,000 MTOPS. Based 
on our review of records provided by the manufacturers to the 
Commerce Department from J anuary 1996 through September 
1997, we noted that China ranked first in the number of HPCs ac- 
quired by tier 3 countries, having purchased a total of 77 HPCs 
during this period. These exports were all made without an indi- 
vidual license being required; in other words, they were supposedly 
to civilian end users, and below 7,000 MTOPS. Examining how 
these machines are being used, however, was beyond the scope of 
our review. 

Responsibility for post-shipment verification checks on exports 
remained with the government, but information on these exports 
reported to the government has been incomplete. Post-shipment 
verifications for computers generally have been of somewhat re- 
duced value because of how the process is implemented. First, post- 
shipment verification really only verifies the physical location of 
the HPC, not how it is used. There are some exceptions to that. 
Also, some governments, such as China, have not allowed the 
United States to conduct post-shipment verifications. 

With regard to foreign availability, we found that subsidiaries of 
U.S. computer manufacturers dominate the overseas HPC market, 
and they must comply with U.S. controls. Russia, China, and India 
have developed HPCs, but their capabilities are believed to be lim- 
ited. 

Thus, our analysis suggests that HPCs over 2,000 MTOPS are 
not readily available to tier 3 countries from foreign sources with- 
out restriction. 

Our report contained two recommendations, one that requires ac- 
tion by the Secretary of Defense and one that requires action by 
the Secretary of Commerce, with support from Defense, Energy, 
State, and the Arms Control and Disarmament Agency. 

First, we recommended that to compliment the studies under- 
taken by DOD and DOE for the House Committee on National Se- 
curity, that the Secretary of Defense should assess and report on 
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the national security threat and proliferation impact of U.S. ex- 
ports of HPCs to countries of national security and proliferation 
concern. It seems to us that this assessment should, at a minimum: 
one, address how and at what performance levels countries of con- 
cern use HPCs for military moaernization and proliferation activi- 
ties; two, whether such uses are a threat to U.S. national security 
interests; and three, the extent to which such HPCs are control- 
lable. 

Second, and these would have to come in sequence, upon comple- 
tion of that analysis we would recommend that the Secretary of 
Commerce, in conjunction with the other agencies that I men- 
tioned, jointly evaluate and report on options to safeguard U.S. na- 
tional security interests regarding HPCs. Such options should in- 
clude, but not be limited to, one, requiring government review and 
control of the export of computers at their highest scalable MTOPS 
performance levels, and two, requiring that HPCs destined for tier 
3 countries be physically modifiOT to prevent their upgrade beyond 
allowable levels. 

These are just some suggestions as to areas that ought to be con- 
sidered. There may be others. 

I would like to comment just briefly on the agency's response to 
our report. In addition to Commerce and Defense, the Departments 
of Energy and State, as well as the Arms Control and Disar- 
mament Agency, offered some views. 

Commerce said that the President's decision was intended to 
change the computer export policy from what it referred to as "a 
relic of the Cold War" to one more in tune with today's technology 
and international security environment, and was based on, one, 
rapid technological change in the computer industry; two, wide 
availability; three, limited controllability; and four, limited national 
security applications for HPCs. Commerce further stated that our 
report focused too much on how countries might use HPCs for pro- 
liferation and military uses rather than on what it called "an out- 
dated Cold War concept of foreign availability." The Department 
said that our analysis of foreign availability was too narrow and 
that foreign availability is not an adequate measure of the problem. 

Now, we agree that rapid technological advances in the computer 
industry have made the controllability of HPCs a more difficult 
problem. However, we disagree that foreign availability is nec- 
essarily an "outdated Cold War concept" that has no relevance in 
today's environment. While the threats to U.S. security may have 
changed, they have not been eliminated. Commerce itself recog- 
nized this in its March, 1998 annual report to the Congress in 
which it stated, 'The key to effective export controls is setting con- 
trol levels above foreign availability." 

Commerce also commented that the need to control the export of 
HPCs because of their importance for national security applications 
is limited. It stated that many national security applications can be 
performed satisfactorily on uncontrollable low-level technology, and 
that computers "are not a choke point for military production." 
Commerce said that having access to HPCs alone will not improve 
a country's military and industrial capabilities. 

While it may be true that many of our modern weapons systems 
were designed with less powerful computer systems. Commerce's 
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view seems to be inconsistent with the requirement for DOD to 
identify militarily-critical technologies. In assessing these mili- 
tarily-critical technologies, DOD has determined that high perform- 
ance computing is an enabling technology for modern tactical and 
strategic warfare, and also important in the development, deploy- 
ment, and use of weapons of mass destruction. 

High performance computing has also played a major role in the 
ability of the United States to maintain and increase the techno- 
logical superiority of its war-fighting support systems. DOD has 
noted in its High Performance Computing Modernization Program 
Annual Plan that "the use of HPC technology has led to lower costs 
for systems deployment and improved the effectiveness of complex 
weapons systems." 

DOD further stated that as it transitions its weapons systems 
design and testing process to rely more heavily on modelling and 
simulation, the Nation can expect more examples of the profound 
effect that HPC capability has on both military and civilian appli- 
cations. 

In DOD's comments on our report, it said that it had considered 
the threats associated with H PC exports to countries of national se- 
curity and proliferation concern. DOD referred to its identification 
of how HPCs in the United States are used for national security 
applications. 

While our report recognized that such an assessment of domestic 
uses had been done, this did not answer our concern. We reported 
that the Stanford study did not assess the capabilities of countries 
of concern, such as China, Russia, Indian, or Pakistan, to use 
HPCs for military or other national security applications, as re- 
quired by its tasking, and the Executive Branch did not undertake 
a specific threat analysis of providing HPCs to such countries. 

As we reported, the principal author of the Stanford study noted 
that no assessment had been done of the national security impact 
of allowing HPCs to go to particular countries of concern, and of 
what military advantage such countries could achieve. In fact, in 
its most recent report— its April, 1998 report— on HPC export con- 
trols, the same principal author also noted that identifying which 
countries could use HPCs to pursue which military applications re- 
mained a critical issue on which the Executive Branch provided lit- 
tle information. State, Energy, and ACDA all generally agreed with 
our report. 

That concludes my prepared statement. 

Senator Cochran. Thank you, Mr. J ohnson, for your statement 
and for your work on this report. 

With the concurrence of the distinguished Ranking Member of 
the Subcommittee, we're going to yield first to the distinguished 
Chairman of the full Committee, Senator Thompson, for any ques- 
tions or remarks he would like to make. 

OPENING STATEMENT OF SENATOR THOMPSON 

Senator Thompson. Thank you very much, Mr. Chairman. 

First of all, let's establish exactly what it is we're dealing with 
regarding these sophisticated computers and their significance with 
regard to nuclear proliferation and military uses. 
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Referring to the final paragraph on page 7 of your report, you 
say, "Prior to the Executive Branch's decision to change computer 
thresholds, scientists at the Department of Energy National Lab- 
oratories and other U.S. Government officials had accumulated in- 
formation to show how countries of concern could use HPCs to fa- 
cilitate the design of nuclear weapons and to improve advanced nu- 
clear weapons in the absence of tests of nuclear explosives. How- 
ever, this information was not used as part of the decisionmaking 
process." Is that correct? 

Mr. J OHNSON. That's what was reported to us, yes, sir. 

Senator Thompson. So the Department of Energy's report came 
down after the new rules went into effect in J anuary 1996? 

Mr. J OHNSON. Well, the report came down after the new rules 
came into effect, but the information that was available that you 
referred to was available prior to that. 

Senator Thompson. All right. 

Mr. J OHNSON. As we understand it, it wasn't necessarily put into 
the form of a report. 

Senator Thompson. So that information had been available, 
certainly 

Mr. J OHNSON. It was available, had it been sought. 

Senator Thompson [continuing]. At the time that the Stanford 
report was being written. Is that correct? 

Mr. J OHNSON. That is correct, yes. 

Senator Thompson. That these computers could facilitate the de- 
sign of nuclear weapons. 

I refer to page 17 of your report, where the Department of De- 
fense comments on this issue. It says, "Moreover, Commerce's posi- 
tion on this matter is not consistent with that of"— they're talking 
about another position of Commerce, different from the one I just 
articulated— "DOD, in its Militarily Critical Technologies List, has 
determined that high performance computing is an enabling tech- 
nology for modern tactical and strategic warfare, and is also impor- 
tant in the development, deployment, and use of weapons of mass 
destruction. High performance computing has also played a major 
role in the ability of the United States to maintain and increase the 
technological superiority of its war-fighting support systems." And 
then you go on to point out that more and more we have to rely 
upon simulation and modelling and so forth, that it is more signifi- 
cant. 

So you have got both the Department of Energy and the Depart- 
ment— when was this Militarily Critical Technologies List pub- 
lish^? 

Mr. j OHNSON. Well, they do one periodically, I think on an an- 
nual basis. 

Mr. Phillips. It's essentially on an ongoing basis, and informa- 
tion from the one during the 1995 period was carried over into 
1996. 

Senator Thompson. So this is the one that was extant at the 
time that this report was produced? 

Mr. j OHNSON. Right. 

Senator Thompson. So you have both the Department of Energy 
and the Department of Defense saying that these are computers 
that can assist people in their design of nuclear weapons and is an 
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enabling technology for modern tactical and strategic warfare and 
the use of weapons of mass destruction. 

So this is the background that we have when the administration 
decided to change the rules of the game in J anuary 1996 and to 
lower the bar and make it easier for us to export these computers? 

Mr. J OHNSON. Right. 

Senator Thompson. So the answer, as I understand it, is multi- 
fold. I am amazed that the Department of Defense is under the im- 
pression that the issue of whether or not these can be converted 
for military uses was addressed by the Stanford report, when in 
fact it obviously was not. 

Mr. J OHNSON. Well, one small part of it, I think, to give them 
their due. They did consider how HPCs were used domestically in 
our weapons system development and other aspects. But that 
doesn't convert, right. 

Senator Thompson. Well, our major concern is not in that area, 
is it? I mean, it's what China is doing with them, it's what India 
is doing with them. 

Mr. J OHNSON. The countries of concern 

Senator Thompson. That was not addressed? 

Mr. J OHNSON. That was not addressed. 

Senator Thompson. So as I understand it, they rely upon the 
Stanford study to justify what they did, a study which to me is 
pretty clearly based on commercial interests more than anything 
else, as evidenced once again by the lead of the Department of 
Commerce. But they rely on this study, and you found when you 
looked at this study, it was faulty in more than one respect. First 
of all, there is the argument that "everybody does it, everybody has 
it." You looked at the lay of the land, and first of all, there is noth- 
ing in the report— and, I take it, nothing in your conversations 
with the people who did the report— to indicate any backup or any 
basis for the conclusions that they came to. I s that correct? 

Mr. j OHNSON. The concern that we had was that there was a 
lack of empirical evidence to support the conclusions that they had 
come to. 

Senator Thompson. And when you looked at the situation, you 
found that— referring to page 12— the only global competitors for 
general computer technology are three J apanese companies, two of 
which primarily compete for sales of high-end computers, systems 
sold in small volumes and performing at advanced levels. Two of 
those companies reported no HPC exports to tier 3 countries; and 
China and Pakistan, of course, are tier 3 countries 

Mr. j OHNSON. Correct. 

Senator Thompson [continuing]. While the third company re- 
ported some exports on a regional, rather than country, basis. 
That's j apan. 

One German company sells these computers, primarily in Eu- 
rope, and has reported several sales over 2,000 MTOPS to tier 3 
countries. 

One was a British company, but this company said that it never 
sold a system outside the European Union. 

You say that a 1995 Commerce D^artment study of this global 
market showed that American dominance had prevailed at that 
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time, as well. So basically what you're saying is that America has 
the clear dominance in this area? 

Mr. J OHNSON. That's right. 

Senator Thompson. And has had for sometime? 

Mr. J OHNSON. Yes. 

Senator Thompson. And you also state, "Available information 
indicates the capabilities of China, I ndia, and Russia to build their 
own HPCs still lag well behind that of the United States, J apan, 
and European countries." Is that correct? 

Mr. J OHNSON. That is what was reported to us, right. 

Senator Thompson. Another problem you had with the report, 
besides the fact that there was not supporting documentation for 
the conclusion that this was uncontrollable and everybody has it or 
is going to soon have it, is that this report was supposed to assess 
the capability of countries of concern to use these computers for 
military purposes. That was supposed to be a part of this Stanford 
report, wasn't it? 

Mr. J OHNSON. Yes. That was one of the taskings, but we also rec- 
ognize and acknowledge that that tasking could not have been ful- 
filled because of a lack of information that only the U.S. Govern- 
ment can provide. 

Senator Thompson. Well, I understand. I'm not asking you why 
it wasn't fulfilled, I'm asking, was it supposed to be in there? And 
the answer to that is yes? 

Mr. J OHNSON. Yes. 

Senator Thompson. And the next question is, was it in there? 

Mr. J OHNSON. No, it was not. 

Senator Thompson. And the answer to that is no. In fact, in the 
report they refer to the fact that it's not in there. They acknowl- 
edge that they do not address that, and they have certain rec- 
ommendations as to what they feel needs to be done in order for 
this government to determine whether or not the countries to 
which these are being shipped could convert them for military pur- 
poses. But as far as we know, that was not done. 

Mr. J OHNSON. That has not been done, and that recommendation 
is contained in Dr. Goodman's April, 1998 study, as well. So that 
is still an area of concern. 

Senator Thompson. I notice on page 8 of your report, the DOE 
study concluded that 'The acquisition and application of these com- 
puters to nuclear weapons development would have the greatest 
potential impact on the Chinese nuclear program," 

Mr. J OHNSON. Yes. 

Senator Thompson [continuing]. "Particularly in the event of a 
ban on all nuclear weapons testing." Also, the study indicates that 
India and Pakistan may now be able to make better use of the 
HPCs in the 1,000 to 4,000 MTOPS range for their nuclear weap- 
ons programs because of the testing data that they acquired in May 
1998 from underground detonations of nuclear devices. Is that 
right? 

Mr. J OHNSON. That is correct. 

Senator Thompson. So now it appears, as of the time of this re- 
port, the opinion is that India and Pakistan can use these com- 
puters in the 1,000 to 4,000 MTOPS range for their nuclear pro- 
grams. 
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On page 10, where you're dealing with the fact that license appli- 
cations have declined, you say, "Also during this period, 77 HPCs 
were exported to China and 19 were exported to India, all without 
individual licenses. Most U.S. HPCs exported in this period, about 
85 percent, had performance levels between 2,000 and 5,000 
MTOPS." 

Mr. J OHNSON. Yes. 

Senator Thompson. So am I to understand that some computers 
with 2,000 and 5,000 MTOPS were exported to both China and 
I ndia? 

Mr. J OHNSON. Yes. In fact, all of the ones that were exported 
during this period of time to China and India were within that 
range, that are included in that 77. 

Senator Thompson. And that is the range that has the greatest 
potential impact on the Chinese program, and India and Pakistan 
may better use computers in that range for their nuclear weapons 
programs. I find that amazing. 

I have no further questions. 

Senator Cochran. Thank you very much, Mr. Chairman. 

Senator Levin, I'm going to call on you now, if you would like to 
proceed with your questions, then I will follow you. 

OPENING STATEMENT OF SENATOR LEVIN 

Senator Levin. Thank you, Mr. Chairman. Thank you, and I also 
have a prepared statement which I would appreciate being made 
a part of the record. ^ 

Senator Cochran. Without objection it will be printed in the 
record. 

Senator Levin. Thank you, Mr. Chairman. 

First of all, in terms of the national security questions which are 
the most significant questions, as part of the studies which you 
have done for this Subcommittee and for the Senate Armed Serv- 
ices Committee, did the GAO assess and reach a conclusion as to 
whether the 1996 restructuring of computer export controls has 
had any negative effect on U.S. national security? 

Mr. J OHNSON. We don't have that kind of capability. But what 
we looked at was whether or not the Executive Branch had per- 
formed that, and they had not. 

Senator Levin. Let me get to the DOD questions, because you 
said that they have not done it, and yet the DOD says that it did. 
In their letter to Mr. Nelson, the DOD says that 'The GAO draft 
report inaccurately states that DOD did not consider the threats 
associated with high performance computer exports. DOD did take 
into account the security risks associated with the export of HPCs 
to countries of national security and proliferation concern. DOD 
identified numerous national security applications that require var- 
ious levels of computing power, which helped to determine licens- 
ing policies for the various country groups and to establish specific 
safeguards on computer exports. Countries of greatest national se- 
curity and proliferation concern are subject to the most stringent 
licensing and safeguard requirements." 

Do you disagree with that statement of the DOD? 


iJhe prepared statement of Senator Levin appears in the Appendix on page 39. 
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Mr. J OHNSON. Yes. Substantially, what DOD is referring to are 
the analyses and the information that they provided on how HPCs 
are used for domestic— for our own weapons systems development. 
Now, when the tier system was created, they did take into ac- 
count— they had six different criteria, and took into account the po- 
tential of how a country might use an HPC, whether they were a 
member of the nonproliferation treaty, and a number of other cri- 
teria. But they did not do a specific threat analysis of how indi- 
vidual countries might use HPCs or how that might threaten our 
own national security. That's the part that was not done. 

Senator Levin. Are you disagreeing with the statement of the 
DOD which says that "the GAO draft report inaccurately states 
that DOD did not consider the threats associated with high per- 
formance computer exports." You disagree with that? 

Mr. J OHNSON. Yes. 

Senator Levin. So there's just a difference here between the 
DOD and the GAO on that specific statement? 

Mr. J OHNSON. Right. 

Senator Levin. And then it says in the next sentence, 'The DOD 
did take into account the security risks associated with the exports 
of HPCs to countries of national security and proliferation con- 
cern." On that specific sentence, do you disagree with that? 

Mr. J OHNSON. Not entirely. Like I said, they did take some as- 
pects of that into account as part of their development of the tier 
system. 

Senator Levin. On that sentence, then, you agree in part and 
disagree in part? 

Mr. J OHNSON. Right. 

Senator Levin. And on the first sentence, you say you just dis- 
agree with it. 

On the third sentence, "DOD identified numerous national secu- 
rity applications that require various levels of computing power, 
which helped to determine licensing policies for the various country 
groups and to establish specific saf^uards on computer exports." 
You disagree in part, or totally 

Mr. j OHNSON. I totally disagree with the specific words that they 
use there because, as I mentioned, they are referring to the deter- 
mination of how we use those H PCs in weapons development. 

Senator Levin. And the fourth statement in that paragraph, 
"Countries of greatest national security and proliferation concern 
are subject to the most stringent licensing and safeguard require- 
ments." Do you disagree with that? 

Mr. j OHNSON. Wdl, I really can't respond to that because, like 
I said, we didn't ourselves develop special levels. The export con- 
trols that have been established are being enforced to the extent 
that they can, but I can't comment specifically on that assertion. 

Senator Levin. OK. The next paragraph says the following, 'The 
GAO recommends that the Secretary of Defense assess how and at 
what performance levels countries of concern use HPCs for military 
modernization and proliferation activities," and then they go on to 
say, 'These factors were taken into account by DOD and the inter- 
agency process in the 1995 review of computer export controls." Do 
you disagree with that? 
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Mr. Johnson. Well, I don't know what they mean, "taken into 
account," but I do know that they didn't do an assessment of coun- 
tries of concern and how they might use high performance com- 
puters for the development of their systems. 

Senator Levin. Well, let me re-read it to you. It seems to me 
there's just a conflict on this one 

Mr. J OHNSON. Well, there may be. What I don't know is what 
they mean by they "took it into account." Did they think about it? 
We were unable to see any study, any documentation where they 
took that into account. 

Senator Levin. So you don't deny that they took that into ac- 
count, you just haven't seen the documents in which they did take 
them into account? 

Mr. J OHNSON. Yes, it's like suggesting that somebody consider 
something, and they may consider it for 30 seconds, and go on. But 
we did not see a study or an analysis that would satisfy what we 
were intending in our recommendation. 

Senator Levin. So again, I just want to be really clear on this, 
because we ought to ask the DOD these questions, Mr. Chairman. 

I would hope we would ask the DOD for the information here, be- 
cause there seems to be a conflict between the Department of De- 
fense and the GAO here, and I just want to repeat this sentence. 

Senator Cochran. We received a request to invite a witness from 
the Department of Defense. Our staff called and talked to Sandi 
Stewart over in the Secretary's office to convey that request. The 
Defense Department was unable to provide a witness, but we 
would be happy to hear from them at some future point. 

Senator Levin. Well, I don't know if anyone's here. I have no 
idea. But in any event, I think we ought to ask the Department of 
Defense that question because there is a difference here between 
the GAO and the Department of Defense. The Department of 
Defense 

Senator Cochran. We can submit that to them in letter form, 
and I will join you in the request. 

Senator Levin. All right. Because when the DOD represents here 
that it represents to you folks— that these factors— I 'd better repeat 
the whole sentence. 

'The GAO recommends that the Secretary of Defense assess how 
and at what performance levels countries of concern use HPCs for 
military modernization and proliferation activities. These factors 
were taken into account by DOD and the interagency process in the 
1995 review of computer export controls." 

It seems to me there's a conflict here between the GAO and the 
DOD, and we ought to ask the DOD what they mean because they 
obviously just differ with the GAO on this point. 

It's clear there's a difference here, isn't that right? 

Mr. J OHNSON. Yes. 

Senator Levin. Now, in terms of the DOD, they also say the 
following 

Your comment is that the Stanford University study did not in- 
corporate— did not consider certain material. 

Here's what they say about the Stanford study. They say, 'The 
Stanford University study referred to in the GAO report was just 
one of many inputs considered by the Executive Branch in its 1995 
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assessment of computer export controls. Information and analysis 
was also provided by various Defense components, as well as other 
U.S. Government agencies, including the intelligence community." 

Do you agree with that statement? 

Mr. J OHNSON. Yes, but the key component, the key study, was 
the Stanford study. 

Senator Levin. Do you know what other inputs there were from 
other U.S. Government agencies, including the intelligence commu- 
nity, on the part that the Stanford study said it did not have ade- 
quate information on? 

Mr. J OHNSON. We know that there was a study by the Institute 
for Defense Analysis, IDA, and that there were other documents 
that we reviewed that were provided to us, because we asked for 
everything, the whole range of considerations from all the agen- 
cies— not just DOD, but from Commerce and Energy as well, and 
we eval uated those. 

Senator Levin. Did that include the intelligence community? 

Mr. J OHNSON. Yes. 

Senator Levin. So you would agree, then, with the statement of 
the DOD that the Stanford University study was just one of many 
inputs, and that information and analysis was also provided by 
various Defense components, as well as other government agencies, 
including the intelligence community? 

Mr. j OHNSON. Right. 

Senator Levin. You would agree with that. 

Mr. Phillips. May I add an elaboration to that, a little more de- 
tail? 

Senator Levin. Sure. 

Mr. Phillips. There were a few items that were presented to us 
as being part of the study. One was information from the intel- 
ligence community which was largely a ranking of countries by 
general proliferation activities and concerns. There was nothing 
from the intelligence community or DOD that looked at how HPCs, 
particularly, were of a threat nature or were going to be used. So 
it was more of general proliferation activity. They looked at the ef- 
fectiveness of the export controls of different countries, that type of 
thing. 

There was another study, one from Institute for Defense Anal- 
ysis, which really talked about a technical feasibility study, on a 
very technical level, that did not seem to be a major part of the 
information in the decision. 

Finally, they alluded to some DOD analyses related to Defense 
applications. Again, there was no specific document that anyone 
provided to us to show us what that was, and the information 
seemed to overlap considerably with what was presented in the 
Stanford study. Some people told us that whatever DOD did, they 
did collaboratively with the Stanford study, and it was, again, in- 
corporated in there together. They also mentioned some Internet 
search, but they had not kept that material. 

That was about the extent of what was presented to us. 

Senator Levin. Is there certain information that the National Se- 
curity Council had that was not made available to you? 
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Mr. J OHNSON. Well, we don't know, because we asked to meet 
with a National Security Council representative on this issue and 
were told that they would not meet with us. 

Senator Levin. All right. 

You have a statement here that "We requested, but were denied 
access to, information from the National Security Council and data 
and analyses that were used in the interagency forum to reach the 
final decision to revise controls." So, according to your statement 
here, anyway, there was certain information from them that they 
would not release 

Mr. J OHNSON. That may exist 

Senator Levin [continuing]. That may exist that was not pro- 
vided to you? 

Mr. J OHNSON. Right. 

Mr. Phillips. The one point I would want to make on that, when 
we talked to the NSC representatives, they wouldn't talk to us but 
they referred us back to the agencies involved and said that they 
would have whatever analysis they were using. 

Senator Levin. Well, did they say there was no additional anal- 
ysis? Because your statement here says they would not give you 
the data and analysis that were used, it says here, in the inter- 
agency forum. So it implies that there may have been data that 
was used there other than the data that you received from the 
agencies. That's the implication here. 

Mr. Phillips. No, we have no knowledge if there was anything 
else that was used. Again, they wouldn't discuss the decision- 
making with us, so we can't say what they actually used. But as 
far as what was provided to us, or what we were referred to, again, 
they said go back to the agencies and ask them. 

Senator Levin. Did you, or could you, list for the National Secu- 
rity Council the data and analysis which you received from the 
agencies and ask them whether there was any other material 
which they used? Could you do that? 

Mr. J OHNSON. Yes, we could. 

Senator Levin. Because I think that would be useful to us, so 
that we can find out whether or not there is additional data which 
they don't wish to disclose, other than what you've already seen 
from the agencies. 

As I understand it, the DOD played a critical role in designing 
this four-tier structure, is that correct? 

Mr.] OHNSON. That's my understanding, yes. 

Senator Levin. So this was essentially a DOD design? 

Mr. J OHNSON. I'm not sure I would consider it essentially a DOD 
design. I would say it's an Executive Branch design. It was through 
an interagency process that that was done, but some of the ground- 
work was by DOD. 

Senator Levin. They support this design? 

Mr. J OHNSON. Yes. 

Senator Levin. And finally— I think I'm probably over my time, 
Mr. Chairman, I'm sorry, I haven't tracked it— in the tier 3 li- 
censes, as I understand it, if a license is granted and any of the 
agencies that are involved here, including DOD or DOE, have an 
objection to the license, there is an appeal process. Is that correct? 

Mr. J OHNSON. That's correct. 
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Senator Levin. So any one of these agencies that are involved 
here can effectively stop a sale if it doesn't approve of it, and then 
kick it up two or three levels, is that correct? 

Mr. J OHNSON. That's correct. 

Senator Levin. All right. I have additional questions but I am 
way over my time limit, Mr. Chairman. 

Senator Cochran. Let me go back if I may, Mr. J ohnson, and re- 
view the conclusions you reached about this report on which the 
administration based much of its reason for making the change in 
export control policy, the so-called Goodman Report or the Stanford 
University report that was led by Dr. Goodman. 

Your conclusion, as I understand it, is that the administration 
placed great weight on that report 

Mr. J OHNSON. Yes. 

Senator Cochran [continuing]. And that they 

Mr. J OHNSON. That was a key component of the decision process. 

Senator Cochran. That was what? 

Mr. J OHNSON. A key component, I 'm sorry. 

Senator Cochran. One could conclude that it was a very impor- 
tant part of the decisionmaking process, is that correct? 

Mr. J OHNSON. That's correct. 

Senator Cochran. And in your analysis of the Stanford study, 
you tell us in your report that there was a lack of, in your words, 
"empirical evidence or analysis" to support the conclusions reached 
by that report. Is that correct? 

Mr. J OHNSON. That's right, yes. 

Senator Cochran. Well, do you conclude, therefore, after you've 
reviewed the study and you've looked to find the evidence on which 
the policy changes were based— do you conclude that the Stanford 
study lacks credibility because its assumptions and conclusions are 
not supported by the empirical evidence or any analysis? 

Mr. J OHNSON. I'm not sure I would want to characterize it quite 
like that, but what I would say is that our conclusion is that more 
information should have been made available to the Executive 
Branch in making that decision. There should have been further 
analysis done on the cost of implementing the export controls, and 
on the aspects of controllability. The conclusion that Dr. Goodman 
came to, that certain levels were uncontrollable, simply didn't have 
the empirical data to support that. I don't want to be so harsh as 
to say it lacks credibility, but it did have those limitations. 

Senator Cochran. One example that your report points out is 
that officials could not explain nor provide documentation as to 
how they arrived at the decision to set the license requirements for 
exports of HPCs to tier 3 countries for military or proliferation end 
users at 2,000 MTOPS. 

Mr. J OHNSON. Right. 

Senator Cochran. The study concluded that the computing 
power 4,000 or 5,000 MTOPS was uncontrollable. 

Mr. J OHNSON. That's right. Essentially, we were told that that 
was an interagency process that was undocumented, and that it 
was done that way to be conservative. 

Senator Cochran. Could you tell us which administrative offi- 
cials or Executive Branch officials you are referring to? 
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Mr. J OHNSON. Wdl, we asked a number of Executive Branch offi- 
cials, but primarily in the Department of Commerce, and at several 
levels, including the higher levels in the Department of Commerce, 
Bureau for Export Administration. 

Senator Cochran. Did these officials give you any explanation 
for the recommendations that resulted in the licensing parameters 
for tier 3 countries? 

Mr. Johnson. Well, they did, in terms of the 2,000. They ex- 
plained that it was an interagency process and it was established 
at 2,000 rather than at the higher levels, to be more conservative. 
We asked for documentation to help us track through that decision- 
making process, and we were not provided documentation. 

Senator Cochran. Were you told that there was any? What was 
the response? Did you actually know of some documentation, or 
suspect that there was some? 

Mr. J OHNSON. No, we did not know of any. 

Senator Cochran. The suspicion was the other way, then, that 
there wasn't any? 

Mr. J OHNSON. Yes. 

Senator Cochran. I'm speculating, now, but 

Mr. J OHNSON. We did ask for the actual minutes of the inter- 
agency meetings and were told that there were none. 

Senator Cochran. Would it be fair to conclude that this was a 
result of the influence of the computer industry and its pressure on 
the administration to set that parameter as it was set? 

Mr. J OHNSON. I'm not sure that I would necessarily agree with 
that conclusion. I would think that if there was strong influence by 
the computer industry, that the level would have been set higher 
than at the 2,000 level. But I'm purely speculating. I can't speak 
for what was in their minds in establishing the control levels. 

Senator Cochran. You say in the report that the Stanford study 
described uncontrollability as "the relationship between the dif- 
ficulty of controlling computers, and the willingness of government 
and industry to meet the costs of tracking and controlling them." 

Mr. J OHNSON. Right. 

Senator Cochran. Does this mean that computers could be un- 
controllable, simply based on a limited willingness on the part of 
government and industry to control them? 

Mr. J OHNSON. One could certainly interpret it that way. If they 
decided that they— either government or industry— decided that 
they didn't want to spend anything on controlling HPC's, that 
would indicate an unwillingness to 

Senator Cochran. That means that based on the Stanford study, 
then— the description is that "U.S. high performance computers are 
uncontrollable." 

Mr. Johnson. Well, if the conclusion were reached that they 
didn't want to spend any money, then they clearly be uncontrol- 
lable. 

Senator Cochran. Does GAO agree with the Stanford study's de- 
scription of "uncontrollability"? 

Mr. J OHNSON. Well, in a sense we would, but we think that in 
reaching that conclusion there should be some data on how much 
is spent, what the cost is, and a comparison of cost to risk. We 
didn't see any of that in the study. 
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Senator Cochran. Your report also says, Mr. J ohnson, that the 
Stanford study was "tasked with assessing the capabilities of coun- 
tries of concern to use HPCs for military and other national secu- 
rity applications, and it did not do so." 

Mr. J OHNSON. Correct. 

Senator Cochran. Is that based on a written directive to Dr. 
Goodman from the Department of Defense and the Department of 
E nergy? 

Mr. J OHNSON. It's in the tasking, yes. 

Senator Cochran. This was in the formal letter? So this was a 
specific request that was made of the university? 

Mr. J OHNSON. That's correct. It was in its tasking, right. 

Senator Cochran. Were any officials in the Executive Branch 
able to identify for you other studies that substantially informed 
the October, 1995 decision to decontrol high performance com- 
puters? 

Mr. J OHNSON. No. 

Senator Cochran. Even though I know, as Senator Levin has 
pointed out, there is the Department of Defense letter responding 
to the report,! saying that there were other considerations. But 
even in your efforts to find out what these sources were or what 
the information was, no one ever produced anything? 

Mr. J OHNSON. That's right. When we talk about the limitations 
of that study, I think we would come to the conclusion that the 
most important limitation has to do with the lack of determination 
as to national security risks involved for providing HPCs to coun- 
tries of concern. 

It seems to us that if that analysis were made, and a decision 
is made that there are no risks, then there is no point in control- 
ling computers, regardless of the capability. There needs to be, first 
of all, the establishment of some national security reason for doing 
that, for controlling high performance computers. We see that as a 
significant limitation in the analysis. 

Senator Cochran. You use the terms in your report of 
"scalability," "upgrading," and "clustering." 

Mr. J OHNSON. Right. 

Senator Cochran. Could you tell us if there are problems associ- 
ated with these efforts and difficulties in adapting software or the 
like? 

Mr. J OHNSON. Yes, we can respond to that, but I'm going to ask 
my expert to. 

Mr. Phillips. Yes. As far as clustering goes, there is a lot of dis- 
agreement within the computer community that we came across 
about how mature that technology actually is. Clustering refers to 
linking computers together, usually by some kind of hard-wire 
interface. And the problems that come in— in theory, the more 
processors you put together, the more power you should get out of 
a computer system. But in reality, as you add more, you also have 
limitations based on the memory and on the communications speed 
between each of the processors communicating with each other. So 
in reality, when you are dealing with these systems in parallel, the 
benefit should be that they can deal with different proolems at dif- 


iJhe letter referred to, dated December 8, 1998, appears in the Appendix on page 122. 
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ferent speeds, but in reality the slowest part of the system is going 
to slow down the whole system. 

These are limiting factors in the capabilities of clustering ma- 
chines. Most people in the community think that they are not in- 
surmountable problems, and that technological advances have been 
getting better. But still, at this point, a number of people— includ- 
ing the authors of the Stanford study— did not think that clus- 
tering technology in and of itself should be driving the thresholds 
for the export controls. 

Senator Cochran. In regard to scalability, could this be detected 
in a post-shipment verification to try to determine whether or not 
these computers have been upgraded by the end user? 

Mr. Johnson. If there is ad^uate expertise by those people 
doing the post-shipment verification, it could be. The problem with 
post-shipment verifications for the most part is that people don't 
have the expertise to do that kind of testing or analysis. 

Senator Cochran. On that subject, who under the current re- 
gime is doing the post-shipment verification? The industry? Or gov- 
ernment officials? 

Mr. J OHNSON. Ordinarily it is government officials from the local 
embassy. There are teams that are sent out from Washington, 
called Special Verification Teams, and they probably would most 
likely have the capability to detect a machine that had been scaled 
up. But most of the post -shipment verifications are done by officials 
of embassies that may not have that kind of capability. So that is 
a limitation, but at the very least they know whether or not the 
machine is physically located there, so there is value to the post- 
shipment verification. 

Senator Cochran. Senator Levin, that's a good stopping place for 
me in this round, if you would like to ask additional questions. 

Senator Levin. Thank you, Mr. Chairman. J ust a few additional 
questions. 

We've gone through some of the disagreements that you have 
with the Department of Defense. In their letter— it's not dated, but 
it's about August 9 

Mr. J OHNSON. Yes, thereabouts. I think we received their letter 
a few days after we received the response from Commerce. 

Senator Levin. OK. But it's addressed to Benjamin Nelson of the 
GAO. 

Mr. J OHNSON. Yes. 

Senator Levin. We've gone through some of the disagreements 
between you and the Department of Defense. There is an addi- 
tional statement in that letter, and I want to see whether you 
agree or disagree with that one as well. 

That letter says that "We in the Department of Defense deter- 
mined that computers with performance below the current license 
threshold for tier 3 countries are widely available globally." 

That's the first one. From what you've testified to already, I take 
it that you disagree with that statement of the DOD, that com- 
puters with performance below the tier 3 license threshold are 
widely available globally. Would you disagree with that? 

Mr. Johnson. We don't have data on that, nor was data pre- 
sented in the Goodman study 
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Senator Levin. No, I mean— it says here that the DOD deter- 
mined that. Do you disagree that they determined that? 

Mr. J OHNSON. We did not see where they had made that deter- 
mination. 

Senator Levin. All right. And you yourselves have not deter- 
mined whether or not computers below the threshold level for tier 
3 are widely available globally? You have not made your own deter- 
mination of that? 

Mr. Johnson. No, but below the license level I would believe 
that they would be widely available. But we don't have that data, 
either. 

Senator Levin. We're talking about tier 3 licensing? 

Mr. J OHNSON. Yes. 

Senator Levin. So you would believe that computers below the 
2,000 level are widely available? 

Mr. J OHNSON. Probably. 

Senator Levin. OK. That would sound like you agree with them 
on that one. 

Now, on Stanford, I gather that you had some discussions with 
the Stanford study folks 

Mr. J OHNSON. Yes, indeed. 

Senator Levin [continuing]. But their response to your comments 
is not attached because it's not the practice of the GAO 

Mr. J OHNSON. We 

Senator Levin. If I could finish. 

Mr. J OHNSON. I 'm sorry. 

Senator Levin [continuing]. As I understand it, it's not the prac- 
tice of the GAO to incorporate the comments of contractors in your 
own reports, whereas you would incorporate comments of agencies 
that you're looking at? Is that accurate? 

Mr. ] OHNSON. That's generally our policy and our practice. There 
are times when we do incorporate comments of contractors. In this 
case, we didn't specifically seek written comments on our reports. 
If the Commerce Department wished to do that, that was their pre- 
rogative. 

Senator Levin. The Commerce Department could have incor- 
porated the Stanford response in their response? 

Mr. ] OHNSON. That's correct. They could have done that. I don't 
know that they did. 

Senator Levin. All right. 

Mr. ] OHNSON. But we had several discussions with the authors 
of the Stanford study and tried as best we could to reflect their 
comments in the text of our report. 

Senator Levin. Your report criticizes the Stanford study for con- 
cluding that computers in the 4,000 to 5,000 MTOPS range were 
widely available, without citing any empirical evidence for their 
conclusions. Is that correct? 

Mr. ] OHNSON. Yes. 

Senator Levin. And do they— when you talk to them, do they 
agree with you? 

Mr. ] OHNSON. They felt that the information that they had avail- 
able, working from the theoretic basis that they were working 
from, was sufficient. 
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Senator Levin. So they felt they did have adequate evidence to 
reach that conclusion? 

Mr. J OHNSON. Yes, but not specifically empirical data on what 
the installed base is at any particular level, they did not have. 

Senator Levin. J ust so that I am clear on this, they felt that they 
did have an adequate basis for their conclusion, but you felt they 
did not? 

Mr. J OHNSON. Yes. 

Senator Levin. So you disagree with the Stanford folks on that 
specific issue. 

Mr. Phillips. I'd liketo add a point on that. Senator. 

What they did feel less certain about, though, was the precision 
of their own definition of what "uncontrollable" means, and that 
was the term that they used predominantly throughout the report. 
Availability was just one aspect of uncontrollability. 

In reaching a conclusion that computers within the 4,000 to 
5,000 MTOPS range were uncontrollable, they themselves admitted 
that they did not fulfill the terms of the definition that they had 
set up to do that. 

Senator Levin. OK. 

I think it would be useful if the Commerce— I don't think the 
Commerce Department incorporated the Stanford response. I may 
be wrong on this, but if they haven't, I think it would be useful for 
the Subcommittee, Mr. Chairman, to request either the Commerce 
Department or Stanford to comment on the findings of the GAO 
relative to the Stanford study. ^ 

Senator Cochran. We have the Commerce Department rep- 
resented here today, so we can ask that question now. 

Senator Levin. All right. 

Senator Cochran. Do you want to write a letter to Stanford and 
ask them for a response to the report? 

Senator Levin. I think so. 

Mr. J OHNSON. I think that would be fair. 

Senator Cochran. Is Dr. Goodman still around? 

Mr. J OHNSON. Yes. 

Senator Cochran. He's been a witness in here, hasn't he? Not 
yet? 

Senator Levin. We have disagreements between GAO and DOD. 
We have disagreements between GAO and Stanford, and it seems 
to me we ought to give both the DOD and Stanford— ask them for 
their explanation of their position, given the GAO report. 

Thank you very much, Mr. Chairman, for doing that, and for 
holding this hearing. 

Senator Cochran. Mr. J ohnson, one of the assumptions under- 
lying the decontrol of HPCs in 1995 was that there would be wide- 
spread availability of HPCs, at least to the level of 7,000 MTOPS, 
by 1997. But according to your report, "Our analysis shows that 
subsidiaries of U.S. companies dominate the overseas sales of 
HPCs." 


iQAO responses to the comments of the Stanford Study and DOD appear in the Appendix 
on pages 104 and 121 respectively. 
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If U.S. companies dominate the overseas sale of HPCs, can there 
be widespread availability of HPCs overseas only if the United 
States elects not to control the computers? 

Mr. J OHNSON. Not on an unrestricted basis. 

Senator Cochran. The Department of Commerce suggested to 
GAO in the course of conducting this study that foreign availability 
is an outmoded Cold War concept— or that was your report? 

Mr.J OHNSON. No, that was our characterization of it. 

Senator Cochran. Right. You included that in your report? 

Mr. J OHNSON. Yes. 

Senator Cochran. Has the Commerce Department, to your 
knowledge, reported otherwise in the recent past to Congress? Or 
does GAO agree with this suggestion, that it's an outmoded Cold 
War concept? 

Mr. J OHNSON. No, we don't agree that it's an outmoded concept. 
And yes. Commerce has used that same terminology and concept, 
which is described in the Export Administration Act, in its most re- 
cent report to the Congress in March. It makes reference to foreign 
availability being established at a level above what is available in 
the market elsewhere. 

So that concept still exists. I would mention, though, that foreign 
availability— and I think I mentioned that in my statement— the 
notion of doing a foreign availability analysis is not specifically re- 
quired for relaxation of controls. That concept is used more often 
in determining that controls ought to remain on a commodity rath- 
er than being taken off. The concept still exists. 

Senator Cochran. Your report also notes that there is a German 
company that has had some sales of HPCs over 2,000 MTOPS to 
tier 3 countries. Does that, in your opinion, constitute widespread 
foreign availability? 

Mr. J OHNSON. No. 

Senator Cochran. Let me ask you how similar to the United 
States are the export control regimes of Germany and J apan for 
HPCs. 

Mr. J OHNSON. They are quite similar. 

Senator Cochran. If a German company, therefore, has made 
limited sales of HPCs capable above 2,000 MTOPS to tier 3 coun- 
tries, why don't more tier 3 countries buy computers from Germany 
instead of from the United States to avoid dealing with the U.S. 
export controls? 

Mr. J OHNSON. What we're told is that we have better technology, 
and we'll accept that. But they also would have to deal with the 
export control systems of Germany, as well. 

Senator Cochran. The report says also that "available informa- 
tion indicates that"— this is on page 13 of your report— "available 
information indicates that the capabilities of China, India, and 
Russia to build their own HPCs still lag well behind that of the 
United States, J apan, and European countries." 

For how long does GAO expect that these countries will lag be- 
hind U.S. HPC capabilities? 

Mr. Johnson. Well, we don't have information on China and 
I ndia. Russia, we were told, is 3 to 7 years behind. 

Mr. Phillips. Yes, from various sources, as little as 3 years and 
as many as 10 years, perhaps. 
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Senator Cochran. You note on page 42 in your report that you 
asked the Commerce Department to provide data to support its as- 
sertion on foreign manufacturers, but "we received no documentary 
support." What did Commerce say about this? 

Mr. Phillips. When we talked with them, they said they were 
relying largely on some HPC world market studies that had been 
done in the 1995 time period. That was the essential explanation. 

Senator Cochran. And you had requested data from the Com- 
merce Department on this subject to support its assertion? 

Mr. Phillips. That's correct. 

Senator Cochran. And that's what you got in response? 

Mr. Phillips. Yes. 

Senator Cochran. Did you get copies of the data? 

Mr. Phillips. We had those reports earlier. They had provided 
them to us at an earlier time, and we in fact even referred to them 
in our report. 

Senator Cochran. Mr. J ohnson, during the preparation of your 
report, did any U.S. exporters provide GAO with evidence of a lost 
sale due to implementation of the requirement in the recent De- 
fense Authorization Act to notify the Commerce Department of 
planned sales above 2,000 MTOPS to a tier 3 country? 

Mr. J OHNSON. No, they did not, and we queried companies to see 
if there had been an effect and we were told that nothing had 
changed. 

Senator Cochran. This is off the subject, but did you get at all 
into the recent decision that led to a fine, and an agreement to pay 
a fine, by I BM for violating export regulations? 

Mr. j OHNSON. No, we did not. That was under investigation dur- 
ing most of the course of our work, so if a case is under investiga- 
tion, we stay away from it. We are aware of the settlement that 
was reached, but 

Senator Cochran. What was the settlement, can you tell us? 

Mr. j OHNSON. As I understand it, IBM— their East European 
subsidiary— entered a plea and paid a fine of $8.5 million, which 
I understand is the steepest fine that has been levied. 

Senator Cochran. And what was that fine imposed for? What 
regulation was violated? Was it the r^ulations as decontrolled by 
the administration, as relaxed, or was it earlier regulations? 

Mr. j OHNSON. No, as relaxed. They had violate the controls in 
existence. 

Senator Cochran. The new controls? 

Mr. j OHNSON. Right. 

Senator Cochran. The new limited controls that exist for ex- 
ports? 

Mr. j OHNSON. Yes. 

Senator Cochran. OK. 

Thank you very much. If we have some other questions that we 
need to ask you to clarify provisions in the report, we will submit 
them to you. But we appreciate your doing this study and we ap- 
preciate your delivering this, and you have instructions here on 
how you can get more copies and everything, right? It's available? 

Mr. j OHNSON. Yes, on the back page. 

Senator Cochran. On the back page here. So if anybody wants 
copies for friends, that's how you can order them. 
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Thank you very much. 

Mr. J OHNSON. Thank you, Mr. Chairman. 

Senator Cochran. Our next panel is the Hon. William Reinsch, 
Under Secretary for Export Administration, U.S. Department of 
Commerce. 

Mr. Reinsch, we thank you for being here and your patience and 
your cooperation with our Subcommittee. 

You are free to proceed with any comments or statement you 
would care to make in response to the GAO report or the subject 
at hand, and then I will have a few questions for you. 

STATEMENT OF HON. WILLIAM REINSCH,^ UNDER SECRETARY 

FOR EXPORT ADMINISTRATION, U.S. DEPARTMENT OF COM- 
MERCE 

Mr. Reinsch. Thank you, Mr. Chairman. 

Let me say first that this is the third time I've been here this 
year, not counting times previous, and I want to begin by express- 
ing my appreciation for your courtesy on every occasion. We 
haven't always agreed on these things, and I have a lingering sus- 
picion that we won't agree today, but you have been on every occa- 
sion fair and generous in giving me time to present the administra- 
tion's point of view, and I want you to know that I appreciate that. 

Mr. J OHNSON. I also harbor the lingering— probably naive— hope 
that one of these days I'm going to convince you that we're right 
and you're wrong [Laughter.] 

But I suspect that will be another day. 

Mr. Reinsch. I am tempted to dump my statement and respond 
to some of the questions that were asked of the panel, but what 
I would like to do is deliver an abbreviated version of it, if I may, 
and then hope that you ask me some of the same questions that 
you asked them, because I would be pleased to respond to some of 
this. 

The debate over computer export policy has been marked by a 
good deal of smoke and heat, but perhaps not as much light as one 
could wish. I want to try today to explain our policy and its deriva- 
tions, and in doing so will comment— albeit indirectly— on the sub- 
stance of most of GAO'S comments. 

The fundamental premises of our policy are that, like it or not, 
rapid technological progress has rendered control of high perform- 
ance computers increasingly difficult, and that it is more important 
to our national security to have a healthy computer industry sup- 
plying state-of-the-art products to our military and intelligence 
services than it is to attempt to "control the uncontrollable" and 
jeopardize our companies' futures in the process. 

Four factors have shaped our thinking. 

The first is technological change. Improvements in micro- 
processor design have allowed high performance computers to be- 
come ever smaller, cheaper, and faster. At the same time, improve- 
ments in microprocessors have made routine desktop PCs capable 
of performing at what were considered supercomputer levels a few 
years ago. 


iJhe prepared statement of Mr. Reinsch appears in the Appendix on page 123. 
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The second factor is global diffusion. We must assess realistically 
our ability to control the distribution of computers when they are 
produced in the thousands, even tens of thousands, and sold from 
a variety of sources around the world. 

Third is the growth of parallel processing, which greatly in- 
creases computer performance and the concomitant ability of users 
to easily upgrade performance. 

Finally, there is our conclusion, based on our research and the 
1995 and 1998 studies, that computer power is a secondary consid- 
eration for many applications of national security concern. 

We have also kept in mind the nature of the computer market, 
which is a vital element of U.S. economic strength. We are world 
leaders in this very competitive market, with $2 billion a year in 
revenue, and this leadership helps us across the board in the infor- 
mation technology sector. The policy adopted by the United States 
in 1995 affected more than $10 billion in exports, which supported 

140.000 jobs annually. If misapplied, export controls can profoundly 
damage this important sector, put these jobs at risk, and— relevant 
to your consideration today— seriously damage our national secu- 
rity by crippling our companies, just as our national security estab- 
lishment's reliance on them is growing. 

The competitive and increasingly global market has strong impli- 
cations for controls. Roughly half the computers made in the 
United States are exported, and the sales fall in the ranges below— 
my written statement provides that. Computers up to 400 MTOPS, 
which are your standard PCs, have been sold in the millions; 400 
to 1,000 MTOPS, in the tens of thousands; 1,000 to 5,000 MTOPS, 
in the thousands range; and a few thousand computers capable of 

5.000 to 10,000 MTOPS have been sold, and some hundreds at lev- 
els beyond that. 

Some of these computers can be reconfigured by their users to 
have much higher performance, and in the future, in response to 
market demands, more and more computers will be scalable. Our 
fundamental reality is that computers which are available in the 
thousands in markets around the world cannot be effectively con- 
trolled, even if they are built in the United States or based on U.S. 
technology. The 1995 study predicted many of these developments, 
and ever^hing we have learned since then confirms them. And I 
want to emphasize that point, Mr. Chairman. 

It seems to me that the previous discussion had a certain note 
of unreality because it concerned itself primarily with whether or 
not the Stanford study presented empirical data. What GAO has 
not really commented on is a look at the marketplace in 1996, 
1997, and 1998 to see reality, because the 1995 study was pre- 
dictive. And I would suggest that if you look at reality today, you 
will find that what the 1995 study predicted came true in their as- 
sessment of what the marketplace would look like this year. It is 
confirmed by the facts of what we have right now. To me, that's 
the best empirical evidence that you have. I can address the study 
later in more detail. 

Now, on technological change particularly, the term means that 
computer performance is constantly improving, creating unavoid- 
able pressure on export controls. There are few sectors that we deal 
with where technological change has been so rapid and so dra- 
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matic. I want to make the point here that our reference to GAO 
about foreign availability being an outdated Cold War concept was 
a reference that was specifically confined to the question of com- 
puters. That is not a statement that we subscribe to as a general 
matter with respect to what we do. It is a statement that we think 
is accurate with respect to this sector. 

Five years ago, the U.S. controlled as a supercomputer machines 
with a performance of 195 MTOPS. Today's average desktop PC is 
more powerful; if you have a Pentium II in your machine, it is 
probably twice as powerful, and the software which can run on it 
is more sophisticated. 

The engine of change is the microprocessor. Computer chips are 
produced in the millions in plants in the United States and over- 
seas, and I want to emphasize this point. This discussion should 
not be about the box; it should be about the chips, because the 
chips are the critical ingredient. You are all familiar with Moore's 
Law, which states that the performance of chips doubles every 18 
months. These performance increases are the result of both im- 
proved design and improved manufacturing techniques. As of Au- 
gust, 1998, chips capable of roughly 500 MTOPS alone are being 
produced in the millions, and chips capable of 1,800 MTOPS are 
being produced in the tens of thousands. Although the United 
States is the most advanced producer, plants around the world can 
make these chips. Within 12 months, if industry projections are 
correct, we can expect to see chips capable of 2,000 MTOPS entered 
into mass production. It happens, Mr. Chairman, that I have one 
of them with me. For the record, this little goodie is smaller than 
the size of my fingernail. This is IBM's latest announced chip, a 
copper-based chip, which operates at 1 gigahertz, or 1,000 mega- 
hertz. It is scheduled to start going into IBM's product line toward 
the end of next year or in early 2000. It will probably start in the 
RS-6000 workstation line and mainframe server lines, which are 
the kinds of technologies that we are talking about in this debate. 
Thereafter, it and chips like it will start to appear in our PC server 
line. The actual MTOPS rating of this chip is proprietary, but I can 
tell you that it will operate at well over 2,000 MTOPS, and that's 
a single chip. 

In addition, I can tell you that advances in processor design, and 
also advances in semiconductor process technology, will allow Intel 
to create processors with double their current MTOPS rating of ap- 
proximately 500 MTOPS today, to over 1,000 MTOPS by early 
1999. Intel will be able to provide specific information about these 
developments next year. Much of the details of these things, includ- 
ing the exact ratings, are proprietary. 

Other technological changes have made it easier to upgrade per- 
formance. These include the increased sophistication of software, 
which is very important here, including for clustering, and the in- 
creased availability of interconnect technologies which offer sub- 
stantial improvements in performance and which may allow num- 
bers of low level workstations to be clustered together to give high 
performance. The spread of parallel processing, which allows many 
microprocessors to work simultaneously on the same problem, has 
also reduced the controllability of high performance computers. 
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You may have read, Mr. Chairman, of several recent occasions in 
which the "encryption community," if you will, announced success 
in breaking 56-bit encryption. One of the devices that they used in 
the first contest was, essentially, parallel processing, to get thou- 
sands of computers working together in a coordinated fashion to at- 
tack a particularly complicated problem. 

Another element of technological change could be called attain- 
able performance, or scalability, which you alluded to earlier. Man- 
ufacturers have sought to build platforms which can be easily up- 
graded through the addition of new boards. This allows users to 
buy computers at one performance threshold, and then increase the 
performance later through upgrades. Some computers are designed 
to allow these upgrades to be performed without even turning off 
the machine, and with system software that automatically adjusts 
to the higher performance levels. The result is that it is possible 
to buy a number of systems that perform well below 2,000 MTOPS, 
or even below 1,000 MTOPS, and thus do not require a license for 
export, and then upgrade these machines to 5,000 or 6,000 MTOPS 
or more. 

Now, on foreign availability, the availability of high performance 
computers built by foreign manufacturers with foreign parts and 
technology was a key determinant of our export policy during the 
Cold War. We believe for computers it now makes little sense and 
is of secondary importance in determining policy. We cannot real- 
istically control the many thousands of U.S.-made computers sold 
freely in Europe, Asia and elsewhere. Many countries we sell to do 
not have re-export controls; in fact, the New York Times recently 
quoted an official from a close European ally as saying that they 
advise their exporters to ignore U.S. re-export controls. We know 
there is a flourishing market in second-hand high performance 
computers overseas; some can be ordered directly over the I nternet. 

I n fact, Mr. Chairman, I asked one of my staff to do a little surfing. 
We've been able to come up with a substantial number of web sites 
here, including sites in the Netherlands, Canada, Austria, and 
Israel, all of which offer for sale substantial numbers of computers, 
many of them in excess of 2,000 MTOPS. 

Now, as a result, even though the United States today dominates 
the market for high performance computers, there is a performance 
threshold below which we cannot realistically expect to maintain 
control of computers unless we restrict sales to everybody, includ- 
ing our closest allies. That is why we have focused on control- 
lability— whether licensing can be effective in restricting access to 
HPCs. The studies in 1995 and the new one in 1998 suggest that 
HPCs are becoming less and less controllable because they are be- 
coming smaller, cheaper, more powerful, and more reliable, requir- 
ing less vendor support. The availability of fast, well -designed 
microprocessors has allowed manufacturers to build more and bet- 
ter computers. Machines capable of 4,000 to 5,000 MTOPS are 
small and easily transportable. Computers well above 2,000 
MTOPS are freely available on the global secondhand market, as 
I just alluded to. We cannot realistically expect to keep the organi- 
zations responsible for weapons development in states of concern, 
organizations that are technically sophisticated and well funded 
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and which enjoy strong government support, from clandestinely ob- 
taining computers with a performance much below 10,000 MTOPS. 

Let me also make the point, Mr. Chairman, that one of the other 
problems with the old standard of foreign availability is its basis 
of searching for comparable quality and sufficient quantity, as the 
basis for availability. The point when it comes to proliferation isn't 
sufficient quantity. In order to determine availability, we don't 
have to determine that the Chinese have an industry that can com- 
pete with IBM or HP or SGI. The Chinese need four or five, or 
maybe ten, computers to meet a lot of their proliferation ne^s. 
That doesn't require a full-scale industry that is competitive with 
ours in third markets. It requires the capability to produce those 
machines at a small scale, and perhaps significant expense. But 
that's very different from the statutory definition. 

In addition, let me say, in our judgment computers are not a 
"choke point" for military production. High performance computers 
have attained a symbolic importance in our export control debates 
which their real utility may not warrant. The fundamental premise 
of critics of our policy is that high performance computers are es- 
sential for making advanced weaponry. We believe this is wrong. 
The weapon systems found in the U.S. arsenal today— the tanks, 
the airplanes, the missiles, the ships— were built with computers 
whose performance was below 1,000 MTOPS. These were the 
supercomputers of the 1980's, but today you can find more capable 
machines on many office desktops. 

We have found that the amount of computing power needed to 
design and manufacture modern weapons, once you get over a few 
hundred MTOPS, is not significant. For example, the level of com- 
putational power used to develop all the bombs in the current U.S. 
nuclear arsenal is less than that found in many workstations. 
Other factors— skill in software design, access to sophisticated 
manufacturing techniques, experience in building weapons, and 
good test data— are much more important than a high performance 
computer. 

To say that this is an enabling technology, which is what the 
MCTL does, which is what GAO commented on, is very different 
from saying that this is a choke point. 

There are a number of national security applications— precise 
weather forecasting; computational fluid dynamics, and particle dy- 
namics in particular, which is what happens when you set off an 
explosion or what happens when you set off a chemical weapon and 
where do the particles go— which are areas where high-level com- 
puting power are significant, and our policy attempts to identify 
those and, where possible, protect them. This differs from those 
who have argued that high performance computers will give coun- 
tries like China the ability to leap forward in military production. 
HPCs no doubt provide some incremental benefit, as would a wide 
range of items, but we do not believe that they constitute a choke 
point in weapons development and, as stated previously, even if 
they did, there are serious limitations on our ability to control 
them at all but the highest levels. In fact, none of the proliferation 
regimes— the Missile Technology Control Regime, the Nuclear Sup- 
pliers Group, or the Australia Group, which controls chemical and 
biological items— consider computers important enough to control. 
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The only regime which controls computers is the Wassenaar Ar- 
rangement, which inherited the olcl economic warfare controls 
aimed at the Soviet Union. In the end, these controls did not work 
very well in preventing the Soviet Bloc from getting its hands on 
widely-available computers. They were helpful in keeping big ma- 
chines that require extensive support out of enemy hands, but they 
failed to stop computers available in the thousands, sold freely at 
relatively low prices around the globe without significant vendor 
support. 

We would do well to remember this lesson, because what we are 
experiencing now, as demonstrated in both the 1995 study and the 
1998 study, and what anybody in this industry will tell you, is es- 
sentially an acceleration in the rate that ever-higher performing 
computers are becoming available. In other words, we have con- 
trolled the high end; we can still control the high end. But whereas 
that high end used to be measured in hundreds of MTOPs, now it 
is measured in ten thousands of MTOPS. 

Maintaining our status as world leader in information technology 
and computer manufacturing is critical to both our economic 
growth and our national security. Exports account for roughly half 
the revenues of U.S. computer companies. Ill-advised export con- 
trols would put this vital sector at risk, and at the same time com- 
promise our security by making it harder for the Pentagon to ob- 
tain the cutting edge technology it needs. Events since 1995 have 
confirmed that we are on the right course, and I hope the Congress 
will support the administration as it moves into a new review of 
control parameters. 

Now, let me emphasize that final point, Mr. Chairman, because 
that was mentions in the previous dialogue. In fact, the proposal 
that the President adopted in 1995 was the recommendation of the 
Department of Defense. There were other recommendations made 
by other agencies; it was the Department of Defense recommenda- 
tion that everyone coalesced around and supported, and it was the 
one that the President adopted. 

Now, the Department of Defense is in the best position to explain 
to you why they came to that conclusion, and I can add my own 
thoughts. But let me put in my own words a little bit of what I 
think their reasoning is. 

They have realized that as warfare becomes more electronic- 
based— meaning not only smart bombs and electronic-based weap- 
ons systems, but also more sophisticated command and control and 
communications— their reliance on high performance computers is 
ever increasing and becoming much more important. They also 
know that they don't buy enough to keep any of these companies 
in business. Military business for these companies is less than 10 
percent of their total business. 

What the Pentagon figured out in 1995, and what is reflected in 
its letter embodied in the GAO report, and what they still believe 
based on my most recent discussions with them, is that the most 
useful thing they can do to make sure that they have access to cut- 
ting edge technology, to make sure that their weapons systems and 
C3 facilities are generations ahead of everybody else's, is to have 
a strong, healthy domestic computing industry, which means one 
that is successfully exporting, because that's where they make their 
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money. And the money they make there, they plow back into R&D, 
which is of direct ben^it to the Pentagon. 

In closing, Mr. Chairman, I would ask your indulgence and ask 
to submit into the record an article which I want to commend to 
everyone's attention, which I think is quite thoughtful. It's in the 
current issue of Foreign Affairs magazine. It's by Michael Hirsh, 
who is a reporter for Ne/vsweek, and it's entitled 'The Great Tech- 
nology Giveaway?" with a question mark after it, and it is one of 
the best dissections that I've seen of what has happened to the 
economy as it is globalized, and what has happened to the relation- 
ship between our military and our defense establishment and our 
intelligence establishment, and the civilian sector of the economy. 
Whereas in the 1960's and 1970's you had MILSPEC and military 
technologies driving the train of R&D, now it is reversed. It is the 
civilian sector that is driving the train and the military that is buy- 
ing commercial off-the-shelf items, which means the health of these 
sectors is critical— not just for jobs, which I care about and you 
care about— and not just for the economy, but for our national se- 
curity. If the companies whose representatives are in the back of 
the room here go broke, the biggest loser is the Department of De- 
fense, not the Chinese. 

With that, I am happy to answer your questions. 

Senator Cochran. Thank you very much. 

The article by M ichael H irsch you referred to will be made a part 
of the hearing record.^ 

To what extent have the changes that the Congress recently 
made affected the ability of our computer industry to make sales 
in the foreign markets? Do you know of any downturn in sales that 
could be attributed to the changes that the Congress made? 

Mr. Reinsch. We have not specifically asked them that question, 
Mr. Chairman, and I would recommend that you do. I don't know 
of any in particular. I would say that as far as the 10-day notifica- 
tion process is concerned, as a process matter, it appears to be 
working; that is, companies are submitting notifications and agen- 
cies are responding within the timeframe, and the system appears 
to be going forward. The objection rate, if you will, has been steady 
from the beginning at around 15 or 16 percent, and a little higher 
in some cases and lower in other cases. That seems to be going for- 
ward. 

What I can tell you happens is that when there is an objection, 
that then converts that notification into an application for an indi- 
vidual license, which means that it takes a much longer time. We 
are discovering that most of them are being returned without ac- 
tion because we don't have sufficient information in order to proc- 
ess an individual application. And what we are then finding is that 
many of them are not coming back; that is, the company is just 
folding and not going forward. Whether that is because it's too 
much trouble, whether it's because the sale went away anyway, 
whether it's because it was a shaky sale and they didn't think they 
could get it approved, I couldn't tell you. But I can just say, that's 
one of the results that we've noticed. 


iJhe article referred to from Foreign Affairs magazine by Michael Hirst, appears in the Ap- 
pendix on page 126. 
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Senator Cochran. What about the review of a sale after it has 
been consummated? There is a process now where you have people 
from embassies around the world going in and checking to see if 
the end use is what you expected it to be, and the end user is who 
you expected it to be. How is that working? Are there problems 
there that need to be discussed? 

Mr. Reinsch. The problem that we will ultimately encounter, 
Mr. Chairman, is volume, because we were tasked to visit every 
one of them without regard to whether or not it made sense to visit 
every one of them. And I can give you an illustration. 

A number of these, particularly— and when I say every one of 
them, every one at tier 3; I don't mean the other tiers— a lot of 
these are sold, not all of them, in fact a declining portion, but a 
number of them are sold under warranty or with established ven- 
dor support or with a relationship where something breaks, they 
call up the American company and they go out and examine it and 
fix it. 

I n a number of cases where we've had some questions about the 
nature of the end user, one of the things we've done is consult with 
the companies, and we discovered that they very recently— within 
2 or 3 weeks, often— have made a warranty visit or a r^air visit 
and have been able to provide us some reassurance as to both the 
location of the computer and its use, without us visiting it. Yet, 
we're going to have to visit all those anyway. 

Senator Cochran. You're not taking their word for it, are you? 

Mr. Reinsch. No, we're not taking their word for it. The law 
doesn't permit us to take their word for it. But I will tell you that, 
from the standpoint of management, with limited resources and 
limited people, I would be inclined to put those at the bottom of 
the list, and put at the top of the list the ones where we have no 
feedback from companies, that are more problematical. 

Now, in point of fact our obligation statutorily stems from those 
sold since November 19, 1997, which is a smaller portion of the 
universe. We have, I believe— and I can't speak for the last few 
days— I believe we've conducted about 66 post-shipment visits in 
tier 3 countries. Let me put it this way: All of those have checked 
out favorably with the exception of one, which was not a Chinese 
case. But I would prefer not to go into detail about that one in pub- 
lic session. 

Senator Cochran. Do you think that's a useful thing to do, given 
the fact that we have seen some situations, particularly in Russia, 
with the computers winding up in the weapons laboratories. Where 
a Russian official, the Minister of Atomic Energy, almost gloated 
over the fact that they had obtained these high performance 
computers 

Mr. Reinsch. Let me say first, Mr. Chairman, that, of course, 
was in our judgment an outright violation of our rules, not some- 
thing that fell between the cracks. We thought our rules were 
clear, and they were violated, and that relates to the settlement in 
the one case that you referred to earlier. 

We have always felt that post-shipment visits are a useful en- 
forcement tool. We have used them in the past on a wide variety 
of merchandise and we intend to continue to use them, because we 
think that they provide a lot of information. While on computers 
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GAO makes a valid point— certainly, what they tell you is whether 
it's still there; that's the most obvious thing they tell you— and 
while it is also true that without someone specially trained in com- 
puters, you might not learn a lot more about exactly what the ma- 
chine is being used for, I can tell you two other things. 

First, our people are being trained; in fact, we have a group of 
about 55 of them in town who are being trained tomorrow on this 
very subject. 

Second, without going into a lot of detail in open session, I can 
tell you that the encounters that we have in these visits give us 
a great deal of information above and beyond the mere physical 
presence of the item. 

My objection to the provision is based not on the concept but on 
the flat requirement that we visit every one of them, whether we 
believe it makes sense from a management and control perspective 
or not. My enforcement people tell me that they would much prefer 
to be able to exercise some judgment and visit more intensively the 
ones that they think are problematical and deserve visits, and not 
have to waste time and money going to places where a vendor that 
we have confidence in was there 2 weeks ago, or where we have 
other means of ascertaining what that computer is for. They don't 
have that choice, and as you know from this list of tier 3 countries, 
these places are not all easy to get to. These are expensive visits. 
And if I sent somebody out for 6 weeks on a Safeguards mission 
to do 20 of these, you're talking about $30,000 or $40,000 when you 
add up the air fares and hotel bills and per diem and all the other 
stuff. 

We're going to do the best we can because the statute requires 
us to, but that's our problem with it. 

Senator Cochran. Is there any limitation in the statute in terms 
of the time within which the visit has to be conducted? I don't re- 
call there being. 

Mr. Reinsch. No, sir, there is not. And our general practice is 
not to arrange the visit until sometime after it arrived, because it 
would be stupid to show up before it was installed. Our general 
rule of thumb is, I think, to make those requests between 4 and 
8 months after we've ascertained that it has arrived. 

Now, in the case of computers, what we have put into place is 
essentially a double reporting system. That is, under the current 
system, notifications have to be reported to us, as you pointed out, 
under the law. A notification doesn't constitute a sale, and these 
things often fall through, even after they've been notified. We get 
notified on specs, sometimes. So our enforcement agents also re- 
quire companies to notify us of actual sales, actual deliveries, and 
we base our visiting requirements on those reports, not on the noti- 
fication reports. 

Senator Cochran. Can you tell us the extent to which you have 
encountered difficulty of access? Are some countries just saying 
that you can't have access? 

Mr. Reinsch. I think with respect to the one I alluded to, that 
was part of the problem. I think there is another case where one 
is pending that we have not yet received an answer, or we may 
have gotten an adverse answer. 
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I n the case of China, which you may be building up to, as of the 
President's summit we have an agreement with them on this 
issue— which is not computer-specific— and we have thus far put 
forward one computer post-shipment request, and the nature of the 
agreement gives us a certain amount of time to put that request 
forward, which we did, and gives them a certain amount of time 
to respond, and we're in the middle of that time period right now. 

We have put other post -shipment visit requests forward to the 
Chinese on non-computer items and they have agreed to permit 
those visits, and those visits have been performed successfully and 
favorably. So I have every expectation that they will agree to our 
computer requests and that they will be performed. 

Senator Cochran. I did notice that it was advertised, after the 
recent visit to China by the President, that there was a computer- 
specific— I thought— agreement that would permit us to have ac- 
cess or information that we otherwise didn't have. 

It says, "Press reports indicated an agreement was reached that 
would allow the United States to conduct computer PSVs." Does it 
provide for anytime, anywhere PSVs in China? Or if not, what does 
the agreement permit, if you know? 

Mr. Reinsch. First of all, it is not exclusive to computers. It in- 
cludes computers, but we insisted that it cover anything else we 
want to look at, because we have other problems with the Chinese 
besides computers, as you well know. 

It sets up rules. The basic one is a question of sovereignty, and 
frankly, it's the same rule we would impose on countries seeking 
to do the same thing here; we have to get the government's permis- 
sion. So we can't just show up at the factory door and say, "Sur- 
prise." We have to get the government's permission. We have to 
ask within a certain period of time, and then they have a certain 
period of time to respond and to arrange the visit and conduct the 
visit. Thus far I believe they've accompanied us on the visits. I be- 
lieve that's their current preference. 

The ministry in question that is controlling all this is undergoing 
a substantial reorganization, and, we're told, a reduction in staff of 
approximately 47 percent, which is significant, so it's a little dif- 
ficult to say exactly what impact that is going to have on this. 

We have some things that we would like to do to this agreement 
to broaden it a bit, which I would prefer to discuss with you pri- 
vately and which I'm happy to do. TheJ oint Commission on Com- 
merce and Trade, which is a joint meeting which happens annually 
between the Secretary of Commerce and his counterpart— and this 
is the ministry which does this in China— is meeting in Wash- 
ington in late October and this issue is on the agenda. The Chinese 
agreed to come here for a week-long seminar on export controls in 
April. They did so; they appeared; they agreed to invite us for a re- 
turn this fall. We will be going later in the fall. This is a relation- 
ship that is a work in progress, and we do have further agenda 
items we want to get from them. 

Senator Cochran. Well, that's encouraging. I think progress is 
being made and we ought to continue to pursue that. 

The report that we are talking about today, I think, can be sum- 
marized in this way. The GAO says that the decision that was 
made by the administration to decontrol high performance com- 
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puter exports was really subject to challenge on three grounds: 
First, that it was based on the Stanford study, which lacked empir- 
ical evidence or analysis to support its conclusions that HPCs were 
uncontrollable; second, that there would be widespread availability 
of foreign high performance computers; and third, that the admin- 
istration did not undertake a threat analysis of providing HPCs to 
countries of concern. 

I want to give you an opportunity, if you can, to give us your re- 
action to those three bases of criticism. 

Mr. Reinsch. First, I guess, Mr. Chairman, empiricism is in the 
eye of the beholder. I am familiar with the 1995 study. I think the 
1998 study is much more detailed. But I think it provided a good 
bit of data and information with respect to the state of the com- 
puter industry worldwide. It did not assert— and we don't assert, 
although we would differ somewhat with GAO— we don't assert 
that there is indigenous production of computers that compete suc- 
cessfully with American computers in China or India or in other 
countries that you might name. 

I think we would assess the level of production of those com- 
puters in China as somewhat higher than GAO would, but I would 
recommend you consult with the intelligence community on that 
because they do have information that discusses the state of the 
computer industry in those two countries. 

And I would urge you to keep in mind what I said previously. 
The issue isn't whether they compete with I BM ; the issue is wheth- 
er they can make a dozen of them. There were statements by some 
Indian officials after their nuclear tests that they were employing 
Indian computers to analyze those test results, which I think sug- 
gests that they have some capability— or at least they say they 
have some capabi I ity. 

I think the study has plenty of data about the state of the art 
and empirical data. I think the 1998 study has more. I would point 
out that in fact the authors of the study have substantial propri- 
etary data that they were not permitted to put into either study 
because it was provided confidentially by individual companies who 
gave them quite a bit of information about actual activities, sales, 
and competition. They were not permitted to provide it, but that 
information exists; the authors have some of it, and we have some 
of it. 

On the second issue of availability and controllability, as I've 
made clear, I think we have a disagreement with GAO over what 
the relevant standard is. My judgment of their report on that point 
is that they've asked the wrong question; they probably provided 
the right answer to the wrong question. If you use the statutory 
standard, it is probably a fair judgment to say that availability is 
not there, there is not foreign indigenous production in comparable 
quality and sufficient quantity so as to offset the effectiveness of 
our controls. 

Our point is a better term, and this is not 180 degrees different. 
This is a 40 degree difference, or maybe 50. Our term is control- 
lability, by which we mean the ubiquity of the ingredients and the 
technology. As I said in my testimony, Mr. Chairman, the secret 
here is the chips, it's not the box. It's the ability to take a lot of 
these things that I have now put away, a lot of these chips, to- 
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gether to operate quickly and successfully as a high performance 
computer. What a high performance computer is, is a computer 
that has more processors working faster than a PC. There are a lot 
of ways to put those together. Chips have been effectively decon- 
trolled, except at very high levels, since 1989, as I recall. There are 
lots of people in the world who make chips, not just American com- 
panies. There are a lot of American companies overseas that make 
chips; there are other American companies that make clone chips 
or clone PCs. 

What you are seeing in this industry is the same thing that you 
have seen in the textile industry, the automobile industry, the tele- 
vision industry, a host of industries over the last 40 years. Devel- 
oping countries come in at the low end; they make the basic chips. 
Maybe they stole the design, maybe they licensed it, who knows, 
and they make low-end products and they gradually work their 
way up the value added chain. And that's happening in this sector 
no differently than it has happened in all the other sectors I just 
named, and I know that there a lot of people in your State that 
know about moving up the value added chain in a number of those 
sectors. 

This is no different. Part of our concern here is that we lead the 
world in these computers, particularly at the high end. A viable 
competitor is the j apanese. And we're proud of that, and we want 
to keep it that way. What I would say is, if you tie our guys' 
hands— and you have not suggested doing that— but if the Con- 
gress or our controls were to tie our producers' hands and say "You 
can't sell in such-and-such a market" through one means or an- 
other, what will happen, I would say, is that in 9 to 12 months you 
will have the Koreans, the Taiwanese, and a variety of European 
nations competing at the high end, because you will have opened 
the door and made it economically viable for them to do that. It is 
not economically viable for them to do that now because they don't 
produce products that are as good as ours at this end, and they 
don't have any particular economic incentive to go to the high end. 

If you create the economic incentive by knocking us out of the 
market, then you are handing them the market, and that goes back 
to controllability. These things are out there. They can make these 
products. 

So we would submit that the GAO has asked the wrong question, 
albeit having come up with the right answer. The studies asked the 
right question, and if you want empirical data, look at the market- 
place, invite some of the people in the back row up to talk and tell 
you what's going on in the marketplace, and you will see that what 
Goodman said in 1995 has happened. That's the best empirical in- 
formation that I can find. 

Now, the last point is the most interesting one, which is the 
question of whether we performed a national security effects anal- 
ysis. I guess I would say a couple things about that. I would make 
the point that Senator Levin made; the Department of Defense ar- 
gues that that was taken into account, and I think that's right. I 
think if you want to talk to the Department of Defense, that would 
be a constructive thing to do. They are the agency that is most re- 
sponsible for making those judgments, and they indicated that they 
have done so. My recollection of the interagency discussion sug- 



36 


gests that they made clear that the levels of decontrol that they 
were proposing— or liberalization that they were proposi ng— was 
consistent with their sense of what the security threats were. And 
they can elaborate on that. 

Let me also say that I would disagree with the GAO in the order 
of events. Mr. J ohnson said, "We ought to look at national security 
first, and then figure out what can be controlled." And I will say, 

I think, to the extent the administration did something differently, 

I would acknowledge that we did it in reverse order. We asked our- 
selves first, what is controllable? Then we said, let's look at the na- 
tional security issues. Because I am perfectly willing to tell you— 
and this is not a surprise, nor is it a revelation— if you want to look 
at nuclear weapons design, you can do nuclear weapons design on 
a PC. You can do nuclear weapons design on a PC in your office. 
So if you ask me, is there an adverse national security impact of 
selling PCs, the answer is yes. 

But that debate reminds me a little bit about this guy I was 
reading about the other day who got frustrated over all the hoopla 
about the movie Titanic, so he printed out 500 T-shirts that said, 
"It sank. Get over it." [Laughter.] 

This debate is a little bit like that. This technology is out of the 
box. We can perform a national security analysis, for example, on 
computers below 2,000 MTOPS, and we can tell you that, yes, 
those exports are going to have an adverse national security impact 
here and here and here and here and here. It's kind of an arid dis- 
cussion because there's not an awful lot we can do about it. 

What we can do about it is not stop it for all the reasons I out- 
lined in my testimony. What we can do about it is make sure we 
stay aheaci of the curve, and that we're prepared to deal with the 
consequences of that. And GAO missed that entire point. 

Senator Cochran. Well, you've given a very spirited defense of 
the liberalization of export controls 

Mr. Reinsch. This comes from the heart, Mr. Chairman. 

Senator Cochran. I can tell you're sincere about that, and I re- 
spect that. I think it also means, though, that because we are see- 
ing an evolution of technology in many areas, and this is just one 
of them, we have to be very determined in our effort to do what 
we can do to safeguard America's security interests, and we can't 
just ignore the fact that we have an obligation. I think that na- 
tional security is the highest priority of our government, that the 
agencies that have the responsibility of enforcing our laws on this 
subject have the obligation to do the best thw possibly can with 
the resources they have, to see that they faithfully carry out these 
laws. 

For that reason, I was interested in what is being done to carry 
out the change in the law that the Congress approved on this sub- 
ject. There are many who remain concerned that the policy is 
flawed and that we could do a better job of controlling the sale of 
these H PCs to countries that we know are going to use them to im- 
prove the capabilities of their nuclear weapons or their missile sys- 
tems, particularly if we think that they can proliferate these sys- 
tems to countries that are emerging as threats to our national se- 
curity interests. I am thinking right now of North Korea, for exam- 
ple; Iran is another example, countries that have expressly prom- 
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ised to either destroy the United States or kill Americans or the 
like. This is a situation that makes this a very, very dangerous 
world. I know we can't pass a statute or an amendment to a law 
and end it or make it right or fix it, but we do have an obligation— 
and I know you agree with this— to continue to work as hard as 
we can to be sure that our policies and our export laws are con- 
sistent with that national security interest, as well as our economic 
interest. We are interested here in having a regulatory environ- 
ment that permits our businesses to flourish, to grow, to expand, 
to remain the best in the world, the most advanced in the world. 
We're all for that; I'm certainly for that. It is good to have this 
interaction, I think, and this discussion of these competing inter- 
ests and how we sort them out. 

We will continue to work with the Department of Commerce and 
with you and with GAO and with the Department of Defense and 
others to try to do our part to help make sure we do our part to 
help make sure we do a good job of preventing the proliferation of 
weapons and the means of developing those weapons that threaten 
our security interests. 

We thank you for your continued cooperation and we will stay in 
touch with you. If we have any other questions of you, we will sub- 
mit them for the record. 

Mr. Reinsch. Thank you, Mr. Chairman. It's always a pleasure 
to be here. I 'll be glad to come back if you want. 

Senator Cochran. Thank you very much. Our hearing is ad- 
journed. 

[Whereupon, at 4:15 p.m., the Subcommittee was adjourned, to 
reconvene at the cal I of the Chair.] 
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In the two years since the Qinton Administr^on modified regulatory restrictions on 
computer exports, American exports of high performance computers have surged. In 1996 and 
1997, American companies have sold over 3600 high performance computers overseas, meaning 
computers that have Ac caprdiility to perform 2,000 or more MTOPS, or million theoretical 
operations per second. 2,000 MTOPS is about the level of computing capability needed to run a 
hotel reservation system. 

Some say these surging exports are good news for American woricers, American high 
technology jobs and the American economy. And overall, I think they are right. But others 
point out th^ this good news must be tendered by concern about whether these computer 
exports may be afTecting our national security. TTiat is the subject of today’s hearing, which is 
the second this Subconunittee has held on national security concerns associated with exporting 
U.S. computers to other countries. 

In 1996, the Clinton Administration revamped the system we have for controlling 
computer exports. The previous system was a simple one: any comput« capable of performing 
over a certain level could not be exported without an individu^ export license. But the level set 
was equivalent to the «>mputing capability of the averse desktop computer, which meant thM 
our computer companies were battling red tape chasing an export license for each routine 
computer they wanted to sell abroad. 

The revision, which was the product of extensive interag^acy effort, substituted for the 
across-the-board ^proach a graduated system of increasingly stringent export controls focused 
most on countries whose possession of high performance computers mi^t raise n^onal security 
concerns. The result is a four-tier syston. Tier 1, which covers our closest allies, eliminates 
virtually all licensing requirements for exports to the coycred countries. Tier 2, which includes 
countries that are friendly but less close to the United States than those in the first ti<7, imposes 
limited controls on export of more powerfril computers. Tier 3, which covers countrin that 
raise proliferation and national security concerns such as China, Russia, India and Pakistan, 
imposes still more stringent export controls that take into account both the computing power of 
the machine being exported and the nanire of the oid-usra:. Tier 4, which covers countries 
suspected of terrorism, imposes a ban on computer exports firom the United States. In addition. 
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the Administration reserves the right to block any computer export involving an end-user raising 
proliferation concerns. 

This system, which became effective in January 1996, was the subject of debate in 1997, 
when questions were first raised about whether it adequately protects our national security. 
Congress declined to make major changes, and instead fine-tuned the new system with 
legislation added to the DOD authorization bill. The fme-tuning, among other measures, requires 
the President to provide advance notice to Congress before altering the setup of the four tiers, 
and requires exporters to provide advance notice of certain computer exports to Tier 3 countries 
so that any of five agencies may object to the export and impose a formal licensing requirement. 

The resulting system is complex and still fairly new. Less than a year has passed since 
the fine-tuning in 1997. Nevertheless, it is not too soon to begin to analyze how it is performing 
and whether it adequately protects our national s^urity. 

The General Accounting Office report released today provides information that tells part 
of the story. Statistics compiled by GAO tell us, for example, that of the 3600 high performance 
computers exported in 1996 and 1997, about 2800 or 72% went to our friends and allies in Tier 
1 . Five countries in particular were our biggest customers, Germany, the United Kingdom, 

Japan, South Korea and France. These countries also bought the most powerful machines from 
us. The statistics gathered by GAO also tell us that most of the computers we exported, about 
85%, were in the lower to mid range of capability, from 2,000 to 5,000 MTOPS. 

The statistics also show that about 5% of the total were exported to Tier 3 countries like 
China and Russia. That includes 77 high performance computers exported to China and 28 to 
Russia. I understand the bulk of these computers went to entities like banks, telephone 
companies, and railroads or to conduct oil exploration. But we've also heard reports about three 
instances in which computers exported to China or Russia were diverted to possible military use. 
The computer exported to China has since been returned to the United States, while those sent to 
Russia are still unretumed after more than one year of negotiation and criminal investigations 
into what happened. These 3 instances provide reminders of the stakes involved in exporting 
high performance computers to countries that raise national security concerns. 

In its report, GAO recommends that the Department of Defense perform a new national 
security analysis of the exports that have taken place since the new controls were put in place, to 
determine how they are working and whether changes are needed. 

I look forward to hearing from GAO and the Department of Commerce on these issues 
and commend the Chairman for his leadership in examining these important matters. 
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Mr. Chairman and Members of the Committee: 

We are pleased to be here today to discuss export controls on high performance 
computers (HPCs). Since January 1996, when the executive branch raised the thresholds 
of computer performance for which exporters must obtain a license, several unlicensed 
HPCs were exported to Russia and China, including some sent illegally to a Russian 
nuclear weapons laboratory. You expressed concern about these sales, and asked us to 
(1) assess the basis for the executive branch's revision of HPC export controls and (2) 
identify changes in licensing activities and export enforcement requirements resulting 
from the revision. You also asked that we determine the current foreign availability of 
HPCs, particularly for countries of national security concern. Because the unlicensed 
exports to Russia and China were under investigation by Commerce, Justice and the 
Customs Service, we did not specifically address this matter durirrg our assessment Also, 
it is important to note that we did not determine the appropriate thresholds for 
controlling HPC exports, but instead, as you requested, we evaluated the process by 
which the executive branch made its decisions and the adequary of the information it had 
available for this purpose. 

Our report on the dedaon to revise HPC export controls is being released today,' as is 
our companion report reqxmding to Section 1214 of the Fiscal Year 1998 National 


‘ Export Controls: Irrf mmatinn on the nerrision to Revise High Performance Computer 
Controls (GAO/NSIAr>98-196, SepL 16, 1998). 
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Defense Authoiization Act;Hherefore, my prepared statement will summarize our principal 
findings. However, to facilitate an understanding of the issues, I believe that a brief 
background may be useful. 

BACKGROUND 

As we have stated in previous testimony,’ the U.S. export control system is about 
managing risk; exports to some countries involve less risk than to other countries and 
exports of some items involve less risk than others. The President has the responsibility 
and authority to control and require licenses for the export of items that may pose a 
national security or foreign policy concern, and he may remove or revise export controls 
as U.S. concerns and interests change.’ It should be noted that the law does not require 
that a foreign availability’ arudysis be performed when deciding to remove or relax export 
controls. 


’ Export Controls: National Security Issues and Foreign Availahilltv for High Perfomance 
Computer Exports (GAO/NSIAD-98'200, Sept 16, 1698). 

’ Export Controls: Issues Related to Commercial Communications Satellites (GAO/T- 
NSIA&98-208, June 10, 1998) 

’In this report revision of export controls refers to removal of licensing requirements for 
groups of countries based on the petfoimance levels of HPCs. 

‘The Export Administiation Act of 1979, as amended, describes foreign availability as 
goods or teclmology available without restrictiim to controlled destinaiitHis from sources 
outside the United States in sufficient quantities and comparable quality to those 
prtKluced in the United States so as to render the controls ineffective in achieving their 
purposes. 
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In 1995, the executive branch conducted a review of export controls on computer exports 
to determine how changes in computer technology and its military applications should 
affect U.S. export control regulations. This review was the continuation a process 
begun in the 1980s to take into account the technological advancements in the computer 
industiy. It may be useftd to note that as recently as 1993, the export of computers with 
a composite theoretical performance of 195 millions of theoretical operations per second 
(MTOPS)* were controlled. This was raised to 1,500 MTOPS in February 1994. 

A key element of the executive branch review was a Stanford University study, jointly 
conunissioned by the Conunerce and Defense Departments.' Among other things, the 
study concluded that (1) U.S.-manufactured computer technology with a composite 
theoretical performance of up to 4,000 to 5,000 MTOPS were currently widely available 
and uncontrollable worldwide, (2) computers with a performance level of up to 7,000 
MTOPS would become widely available and uncontrollable worldwide by 1997, and (3) 
many HPC applications used in U.S. natiottal security programs occur at about 7,000 
MTOPS and at or above 10,000 14TOPS. The study also concluded that it would be too 
expensive for govenunent and industry to effectively control exports of computing 


*MTOPS is the composite theoretical performance of a computer measured in millions of 
theoretical operations per second. In principle, hi^er MTOPS indicates greater raw 
performance of a computer to solve computations quickly, but not the actual performance 
of a given machine for a given rqtplication. 

'Building on t he Rarirs- An Examination of High-Performance Computing Export Control 
Policy in the 1990's. Seymour Goodman, Peter Wolcott, and Grey Burkhart, (Center for 
International Security and Arms Control, Stanford University, November 1995) 
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systems with performance below 7,000 MTOPS, and that attempts to control HPC exports 
below this level would become increasingly ineffectual, and would unreasotmbly burden a 
vital sector of the computer industry. 

In armoundng its January 1996 change to HPC controls, the executive branch stated that 
one goal of the revised erqrort controls was to permit the government to taikn’ ctmtrol 
levels and licensing ccmditions to the national security m pn^eration risk posed at a 
qtecific destirudion. The revised export control policy removed license requirements for 
most HPC exports with performance levels up to 2,000 MTOPS-an increase bom the 
previous level of 1,500 MTOPS. The policy also organized countries into four 'computer 
tiers,' with each tier after tier 1 represoiting a successively higher level of concern to 
U.S. security interests. A dual-control system was established for tier 3 countries, such as 
Russia and China. For these coimtries, HPCs up to 7,000 MTOPS could be exported to 
civilian end users without a license, while exports at and above 2,000 MTOPS to end 
users of concern for military or proliferation of weapons of mass destruction reasotts 
required a licetme. Exports of HPCs above 7,000 MTOPS to civilian end users also 
required a license. 

The January 1996 regulation also made other changes. It specified that erqporters would 
be re^nsible for (1) determirdng whether an export license is required, based cm the 
MTOPS level of the computer, (2) screetung end users and end uses for milltaiy or 
proliferation concerns, and (3) keeping records and rqmrting on exports of computers 
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with performance levels of 2,000 MTOPS.' The Fiscal Year 1998 National Defense 
Authorization Act (Public Law 106-85) modified the 1996 revisions by requiring exporters 
to notify the Commerce Department of any plarmed sales of computers with performance 
levels greater than 2,000 MTOPS to tier 3 countries. The govenunent has 10 days to 
assess and object to a proposed HPC sale. The law also now requires Commerce to 
perform post-shipment verifications (PSV) on all HPC exports with performance levels 
over 2,000 MTOPS to tier 3 countries.* 

SUMMARY 

As I indicated, one focus of our work was to assess whether the empirical evidence 
presented in the Stanford study-a key element in the decision to revise HPC export 
controls- supports its conclusions. Our analysis showed that it had 2 significant 
limitations. First, the study lacked empirical evidence or analysis to support its 
conclusion that HPCs were uncontrollable based on (1) woridwide availability and (2) 
insufficient resources to control them. Second, the study did not assess the capabilities 
of countries of concern to use HPCs for military and other national security q>pUcations, 
as requited by its tasking. The study's principal author said that U.S. govenunent data 


' In addition to the standard record-keeping requirements, the regulation added 
requirements for the date of the shipment, the name and address of the end-user and of 
ea^ intermediate consignee, and the end use of each eiqpoited computer 

*The Commerce Department promulgated regulations implementing the law on February 
3, 1998. 
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was insufBcient to make such an assessment, and the study recommended that better 
data be gathered so that such an aiudysis could be done in the future. 

Except for nuclear wet^ns, the executive branch has not completed an assessment of 
the national security risks of exporting HPCs to tier 3 countries, and the nuclear weapons 
assessment was completed by the Department of Energy in June 1998, more than two 
years after the export control policies for HPCs were revised. The executive branch has 
identified high performance computing as having applications in such national defense 
areas as nuclear wetqrons programs, cryptology, conventional wetqpons, and military 
operations. However, except for nuclear weapons, the executive branch has not identified 
how and at what performance levels specific countries of concern may use HPCs for 
national deferrse applications-an important factor in assessing risks of HPC sales. 

In December 1997, the House Committee on National Security directed the Departments 
of Energy and Defense to assess the national security impacts of HPC sales to tier 3 
countries. DOE's study on nuclear weapotrs shows that nuclear weapons programs in tier 
3 countries, especially those of China, India, and Pakistan could benefit ftorn the 
acquisition of HPC capabilities. The executive branch has not yet finished identilVing 
how specific countries of concern would use HPCs for nonnuclear national defense 
applications. 
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Nonetheless, based on its view of the worldwide availability of computing power and the 
technological advancements in this area, the executive branch raised the MTOPS 
thresholds for HPC export controls. The 1996 revision to HPC export controls had three 
key consequences. 

- First, by increasing the performance thresholds for computers that require a license, 
the 1996 revisions decreased the number of license iq>plications from 459 in fiscal year 
1995 to 125 in 1997 and of approved export license applications for HPCs firom 395 in 
fiscal year 1995 to 42 in 1997. 

- Second, the revision shifted some of the government's end use screening 
responsibilities fiom the government to the computer indusbry. In essence, the 
exporters had to decide whether a license was required since the decision is made on 
the basis of the end use, the end user, and the computer performance capability. Tliis 
decision could be particularly difficult for exports to a her 3 country, like Chirm, 
where identifying the distinction between a civilian and military end user can be very 
difficult In response to several allegatioim of improper sales to Russia and China, 
Congress partly reversed this situation by passing the Fiscal Year 1998 Natiorud 
Defense Authorization Act, which requires exporters to notify the Commerce 
Department of all HPC sales over 2,000 MTOPS to tier 3 countries prior to their 
export 
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- TWrd, the regulation required HPC manufacturers to keep records of the end users of 
all their HPC exports over 2,000 MTOPS. Based on our review of records provided by 
the manufacturers to die Commerce Department ftom January 1996 tfarot^ 
September 1997, we noted that China ranked first in the number of HPCs acquired by 
tier 3 countries, having purchased a total of 77 HPC's during this period, these 
exports were all made without an individual license being required. Examining how 
ttiese machines are being used was beyond the scope of this review. 

Besponsibility for PSV checia on exports remained with the government, but information 
on these exports repotted to the government has been incomplete. PSVs for computers 
generally have been of reduced value because of how this process is implemented. First, 
PSVs veti^ the physical location of an HPC, but not how it is used. Also, some 
governments, such as China, have not allowed the United States to conduct PSVs. 

With regard to foreign availability of HPCs,“ we found that subsidiaries of U.S. computer 
manufacturers doirtinate the overseas HPC market and they must comply with U.S. 
controls. Russia, China, and India have developed HPCs, but their capabilities are 
believed to be limited. Ihus, our analysis suggests that HPCs over 2,000 MTOPS are not 
readily available to tier 3 countries &om foreign sources without restriction. 


‘“We trsed the description of foreign availability described in footnote 4 as our criteria 
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The report contains two recommendations: one that requires action by the Secretary of 
Defense, and one that requires action by the Secretary of Commerce with support from 
Defense, Energy, State, and the Anius Control and Disarmament Agency. 

First, we recommended that to complement the studies undertaken by DOD and DOE for 
the House Committee on Natiorud Security, the Secretary of Defense assess and report on 
the national security threat and proliferation impact of U.S. exports of HPCs to countries 
of nadortal security and proliferation concern. This assessment, at a minimum, should 
address (1) how and at what performance levels countries of concern use HPCs for 
military modentization and proliferation activities; (2) whether such uses are a threat to 
U.S. national security interests; and (3) the extent to which such HPCs are controllable. 

Second, upon completion of the analysis suggested in our first recommendation, we also 
recommended that the Secretary of Commerce, in cortjunction with the other agencies I 
mentioned, jointly evaluate and report on options to safeguard U.S. national security 
interests regarding HPCs. Such options should include, but not be limited to, (1) 
requiting government review and control of the export of computers at their highest 
scalable MTOPS performance levels and (2) requiring that HPCs destined for tier 3 
countries be physically modified to prevent upgrades beyond the allowed levels. 
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I would also like to comment just briefly on the agencies' response to our report In 
addition to Commerce and Defense, the Departments of Energy and State, and the Arms 
Control and Disarmament Agency (ACDA) offered their views. 

Commerce said that the President's decision was intended to change the computer export 
policy ftom what it referred to as *a relic of the Cold War to one more in tune with 
today's technology and international security environmenC and was based on (1) rapid 
technological changes in the computer industry, (2) wide availability, (3) limited 
controllability, and (4) limited natiotial security applications for HPCs. Commerce liirther 
stated that our report focused too much on how countries might use HPCs for 
proliferation or military purposes and on what it called an outdated Cold War concept of 
foreign availability*. Ihe Department said fltat our analysis of foreign availability was 
too narrow, and that foreign availability is not an adequate measure of the problem. 

We agree that nq>id technological advancements in the computer irMhistry have made the 
controllability of HPC exports a more difficult problem; however, we disagree diat foreign 
availability is an outdated Cold War concept that has no relevance in today's aivironment 
While threats to U.S. security may have changed, they have not been eliminated. 
Commerce itself recognised this in its March 1998 annual report to the Congress whhh 
stated that the key to effective etqKot contnds is setting control levels above forrign 
availability.' Moreover, the concept of foreign availability, as tqtposed to Commerce's 
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notion of ’worldwide* availability, is still described in the Ebcport Administration Act and 
Export Administration Regulations as a factor to be considered in export control policy. 

Commerce also commented that the need to control the export of HPCs because of their 
importance for national security applications is limited. It stated that many national 
security applications can be performed satisfactorily on uncontrollable low-level 
technology, and that computers are not a ’choke point’ for military production. 

Commerce said that having access to HPCs alone will not improve a country's military- 
industrial cspabilities. 

Conunerce offered no specific evidence to support this point of view, moreover, its view 
seems to be inconsistent with the requirement for DOD to identify militarily critical 
technologies. In assessing these militarily critical technologies, DOD has determined that 
high performance computing is an enabliitg technology for modem tactical and strategic 
warfare and is also important in the development, deployment, and use of weapons of 
mass destruction. High performance computing has also played a major role in the ability 
of the United States to maintain and increase the technological superiority of its war- 
fightirtg support systems. DOD has noted in its High Performance Computing 
Modemization Program atmual plan that the use of HPC technology has led to lower costs 
for system deployment and improved the effectiveness of complex weapons systems. 

DOD further stated that as it transitions its we^rons system design and test process to 
rely more heavily on modeling and simulation, the nation can expect many more 
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examples of the profound effects that the HPC capabUily has on both military and civilian 
applications. 

In its comments on our i^rt, DOD said that it had considered die threats associated 
with HPC esqiorts to countries of national security and proliferation concern. In this 
context, DOD referred to its identificatlcm of how HFCs in die United States are used for 
national security s^plicatitma. While our r^iort recognized that such an assessment of 
domestic uses had been done, this did not address our concern. We reputed that (1) the 
Stanford study did not assess the ciqiabilities of countries of concern, such as China, 
Russia, hidia or Pakistan, to use HPCs for military and other national security 
applications, as required by its taskiiig, and (2) the executive branch did not undertake a 
threat analysis of providing HPCs to such countries of concern. As we reported, the 
principal author of the Stanford study noted that no assessment had been done of the 
national security impact of allowing HPCs to go to particular countries of concern and of 
what military advantages such countries could achieve. In fact, the .^ril 1998 Stanford 
study on HPC export controls by the same principal author also noted that identifying 
adiich countries could use HPCs to pursue which military applicatirais remained a critical 
issue on trtiich the executive branch provided little informatton. 

The Departments of State and Energy, and ACDA generally agreed with our report 

Mr. Chairman, that concludes our prepared testimony. My colleagues and I would be 
happy to respond to any questions you or other members may have. 
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The Honorable Thad Cochran 

Chairman, Subcommittee on International Security, 

Proliferation, and Federal Services 
Committee on Govenunental Affairs 
United States Senate 

Dear Mr. Chairman: 

In Januaiy 1996, the executive branch revised controls on the export of 
U.S.-manufactured hi^ performance computers (hpc) by raising 
thresholds of computer performance for which e}q>orters must obtain a 
license. Subsequently, several unlicensed hpcs were exported to both 
China and Russia, including 17 computers illegally sent to a Russian 
nuclear we 2 q>ons tab. You expressed concerns th^ U.S. national security 
interests may have been compromised by such sales* and requested that 
we (1) assess the basis for the executive branch’s revision of hpc export 
controls and (2) identify changes in licensing activities and the 
implementation of certain U.S. licaising and export enforcement 
requirements since the revision. You also asked us to determine the 
current foreign availability of hpcs, particularly for certain countries of 
natiorud security ccmcem. 

We are also issuing a related report entitled, Export Controls: National 
Security Issues and Foreign Availability for High Performance ComputCTs 
(GAoms!AM 8 - 200 , Sept 16, 1998), pursuant to section 1214 of the Fiscal Year 
1998 National Defense Authorization Act (P.L 106^). 


Background 


The U.S. export control system is about managing risk; ejq>ort5 to some 
countries involve less risk than to other countries aiul exports of some 
items involve less risk than others. Under U.S. law, the P^dent has the 
authority to control and require Ucenses for the export of items that may 
pose a n^onal security or foreign policy concern. Ihe President also has 
the authority to remove or revise those controls as U.S. concerns and 


'The circuinataiK» surrounding these qwctftc exports are being invcattgated by the us. Department* 
of Juatioe and Commerce stu5 the Cuatonis Service. On July 31, 1906,tlieDeparanentorJualice 
announced that IBM Eaat Europe^Aata Ltd entered a guilty idea and received the maximum allowable 
Sne of 18.5 mUtion for violating 17 counts of U.S. export laws. 
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interests change.^ In doing so, the Presid«it is not required under U.S. law 
to c<»iduct a foreign availability an^sis. 

In 1995, as a continuation of changes begun in the 1980s, the executive 
branch reviewed e:q>ort contn^ on coiiq)uter exports to detnmine how 
changes in computer technology ami its mili^y ^plicatimis sh^Mild affect 
U.S. export ccmtnd regulations. In announcing its January 1996 change to 
HPC controls, the executive branch ^ated that one goal of the revised 
export controls was to permit the govemm^ to tailor control levels and 
licensing conditions to the naticxud security <x proUfer^CMti risk posed at a 
specific destination. 

A key element of the ^ecudve branch review of HPC export controls was a 
Stanford Univen^ study, jointly commissioned by die Ckimmerce and 
Defense Departments.^ Among other things, the study was tasked to 
provide an assessment of the availabili^ of hpcs in selected countries and 
the capabilities of those countries to use hpcs for militaiy and c^er 
national security applications. The study concluded that 
(1) U.S.-manufactured computer technology between 4,000 and 

5.000 millions of theoretical operations per second (mtops)^ was widcdy 
av^able and unccmtrollable woridwide, U.S.-manufacUiied computer 
technology up to 7,000 utops would become widely available and 
uncontrollable woiidwide by 1997, and (3) many hpc applications used in 
U.S. national security programs occur at about 7,000 mtops and at or above 

10.000 mtops. The study also ccmdudcd that it would be too expensii^ for 
government and industry to effectively control the international diffusion 
of computing systems with performance below 7,000 mtops, and that 
attempts to contrtd computer exports below this level would become 
increasingly ineffecteal, would hami the credibility of export controls, and 
would unreasonably burden a vital sector of the computer industry. The 


^ tikis report, revision of export controls refers to remerva) of ttcensing rettuirements for^tnipsof 
countries based on the p erformance leveb of HPCa 

on the Bas«« An Emnina^ of Hi^Petfonwee Computog Eigkort Con^ Policy in 
1990'8 , Seymour Goodman, Peter Woleoitt, »d Gwy feiridart {Cen^ for Interoatwmai Secure snd 
Anns Control, Stanford Univeisity, November 1995). 

^MTOPS is the con^Kimte theoretical perfOTnance of a computer measured in millions of theoretica] 
operations per sect^ in pnadple, higher MTOPS indicates greater raw perfonnaru» of a computer to 
w^e computatiaiks but not the actuai perfomuBtee of a given madiine for a ^ven ru>ptieatiQn. 
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study also raised concerns about the ability to control kpc exports in the 
future in light of advances in computing technology.^ 

The export control policy implemented in January 1996 removed license 
requirements for m<»t hpc exports with performance levels up to 
2,000 MTOPS — an increase from the previous level of 1,500 mtops. The 
policy also organized countries into four “computer tiers,” with each tier 
after tier 1 repres^ting a successively higher level of concern to U.S. 
security interests. The policy placed no license requirements on tier 1 
coimtries, primarily th<^ in Western Europe and Japan. Exports of hpcs 
above 10,000 mtops to tier 2 countries in Asia, Africa, Latin America, and 
Central and Elastem Europe would continue to require licenses. A 
dual-control system was established for tier 3 countries, such as Russia 
and China. For these countries, hpcs up to 7,000 mtops could be exported 
to civilian end users wiUrout a license, while exports at and above 2,000 
mtops to end users of concern for military or proliferation of weapons of 
mass destruction reas<ms required a license. Elxports of hpcs above 7,000 
MTOPS to civilian end users also required a license, hpc exports to terrorist 
countries in tier 4 were essentially prohibited. (See appendix II for details 
on the four-tier system of export controls.) 

The January 1996 regulation also made other changes. It specified that 
exporters would be responsible for (1) determining whether an export 
license is required, based on the mtops level of the computer; (2) screening 
end users and end uses for military or proliferation concerns;^ and 
(3) keeping records and reporting on exports of computers with 
performance levels of 2,000 mtops. In addition to the standard 
record-keeping requirements, the regulation added requirements for the 
date of the shipment, the name and address of the end user and of each 
intermediate consignee, and the end use of each exported computer. The 
Fiscal Year 1998 National Defense Authorization Act (P.L. 

105-85) modified the policy for determining whether an individual license 
is required and now requires exporters to notify the Commerce 
Department of any planned sales of computers with performance levels 


‘In April 1998. authors of the 1995 Stanford study published a follow-on discussion paper. 
High-performance Coinputiwg. National Security Applications, and Elxport Control Policy at the Close 
of the 20th Century , as a conbibution to the periodic review of HPC export controls. This paper noted 
(1) that ^>d advances in con^uter technology were continuing but (2) that a proposed change in 
licensing procedure — to review each HPC at its highest attainable level, rather than its configuration at 
time of ejqxJTt — would remove the ctmcem erf HPCs being upgraded without the knowledge of 
exporters or (he U.S- govenunent We did not evaluate the adequacy of the analysis and support of the 
second study. 

“End-use screening is the process exporters follow to evaluate whether a transaction involves an 
unacceptable risk of use in, or diveison to, a proliferator or military end user. 
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than 2,000 mtots to tier 3 c(»intn^. The go^rmnent has 10 days to 
assess and object to a proposed hpc sale. The law also now requires 
Commerce to perform post-shipment verifications (psv) on all hpc exports 
with performance levels over 2,000 mtops to tier 3 countries.'' The 
Commerce Department pfx^nu^ated re^ila^<ms Implementii^ the law <m 
February ^ 1^8. 


Results in Brief Stanford Uiuversl^ study was a key element in the decision to revise 

HPC export c<mtTols. However, our analysis of toe study showed thJd it had 
two significant limitations. First, the stxi&y lacked empirical evidence or 
analysis to support its conclusion that hpcs were uncontrollable based on 
(1) worldwide availability and (2) insufficient resources to control them. 
Second, the study did not assess the c^abilities of countries of concern to 
use HPCS for military and other national securi^ applic^ons, as required 
by its tasking. The ^dy’s principal author said that U.S. govemn^t data 
was insuffici^t to make such an assessment, and the study recommended 
that better data be gathered so that such an analysis could be done in the 
future. In addidcm, the executive branch did not undertake a threat 
anafysis of providing hpcs to countries of concern. Nonetheless, based on 
its undocumented view of the woridwide availability of computing power 
and on the technok^cal advancements in this area, the executive branch 
raised toe BiTTOPS thresholds for hpc export conbols and established the 
four-tier control structure. Although toe Stanford study had Umitations, it 
made some observaticms regarding the potential to upgrade hpcs and the 
export contrd challenge this will present in the fiiture. For example, it 
noted that the tectjtological trend toward upgrading computer 
perfoimance without vendor support or knowlet^e is reducing toe 
effectiveness of U.S. export ccmtxols. 

The 1996 revision to hpc export controls had three key consequences. 

First., the number of computer export licenses issued declined from 395 in 
fiscal year 1995 to 42 in 1997. Second, U.S. hpc exporters were charged 
with responsibilities previously conducted by toe government New U.S. 
HPC exporters' re^xmsibilities included screeiung and reporting on toe end 
use and end user of hpcs. In essence, the exporters had to decide whether 
a license was required since the decision is made on the basis of the end 
use, toe end user, and the computer performance capability. This decision 
could be particuladrly difficult for exports to tier 3 coimtri^, swto as China, 
where identifying the distinction betwe^ a civilian and military end user 


^PSVs w <ai-site visits, gmenBy U.S. gtn'eminenl ctfikials, to ioctfkms goods are shaped 
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can be difficult without infonnation that is sometimes available only to the 
U.S. government This situation was partly reversed by the Fiscal Year 
1998 National Drfense Authoriz^on Act, which requires exporters to 
notify the Commence Department of all hpc sales over 2,000 mtops to tier 3 
countries prior to their export Third, the regulation required hpc 
manufacturers to keep records of the end users of all their hpc exports 
over 2,000 mtops. To date, mformation on these exports rq>orted to the 
government has been incomplete. Req>onsibility for psv checks remained 
with the govenunent However, because of how psvs for conq>uters are 
implemented, th^ value is reduced because they verily the physical 
location of an hpc, but not how it is used. Also, some governments, such as 
China, have not allowed the United States to conduct them. 

With regard to foreign availability of hpcs," we found that subsidiaries of 
U.S. computer manufacturers dominate the overseas hpc market and they 
must comply with U.S. controls. Three Japanese companies are global 
competitors of U.S. manufacturers, two of which told us that they had no 
sales to titf 3 countries. The third company did not provide data cm such 
sales in a format th^ was usable for our analysis. Two of the J8q>anese 
companies primarily compete with U.S. manufacturers for sales of 
high^end hpcs at about 20,000 mtops and above. Two other manufacturers, 
one in Gemumy and one in the Uidted Kingdom, also compete with U.S. 
hpc suppliers, but primarily within EunH>e. Only the German company has 
sold HPGs to tier 3 counizies. Japan, Germany, and the United Kingdom 
each have export controls on hpcs similar to those of the United States, 
according to fcneign government officials. Russia, China, and India have 
devel<^>ed hpcs, but ^e capabilities of their computers are believed to be 
limited. Thus, our analysis suggests that HPCs over 2,000 mtops are not 
readily available Co tier 3 countries firom foreign sources without 
restrictions. 


Key Study Used as 
Basis for Changing 
HPC Controls Had 
Limitations 


The Stanford study, used as a key element by the executive branch in its 
dedsi<m to revise hpc e}q[>ort controls, had significant limitations. It lacked 
empirical evidence or analyris regarding its concluskm that hpcs were 
uncontrollable and, althou^ tasked with doing so, it did not assess the 
ci^Mbilities of countries of c<mcmi to use hpcs fw militaiy and other 
national security applicaticms. The study itself identified as a nu^or 
Umitatitm, its inability to assess capabilities of countries of ccmcem to use 
hpcs for their military programs or national security applications, on the 


*W« uwd • de KTi p ti on of foreign avMliMity in Uie Export Administntion Act (EAA) of 1979, m 
■ nended, H our ciitcm. 
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basis that such mf<Hrmation was not available, and recommended that such 
an assessment be d<me. The study noted that trends in hpc technology 
development could affect U.S. security and the ability to control hpc 
exports in the future and need to be further studied. Despite the study’s 
limitations, the executive branch decided to relax HPC export controls. 


The Stanford Study Lacked 
Evidence of HPC 
UncontroUability 


The Stanford study accumulated infonnation from computer companies 
on U.S. HPC market characteristics and concluded — without empirical 
evidence or analysis — that computers between 4,000 and 5,000 mtops were 
already available wm’ldwide and uncontrollable and that computers at 
about 7,000 mtops would be widely available and uncontrollable by 1997.® 
Using the findings from the Stanford study, executive branch officials set 
the computer performance control thresholds for each tier. However, 
these officials could not explain nor provide documentation as to how the 
executive branch arrived at the decision to set the license requirements for 
exports of hpcs to tiw 3 countries for military or proliferation end users at 
2,000 MTOPS, even thou^ the study concluded that computing power 
below 4,000 or 5,000 mtops was already “uncontrollable.” 


The study identified the following six factors as affecting controllability of 
hpcs: computer power, ease of upgrading, physical size, numbers of units 
manufactured ami sold, sources of sales (direct sales or through resellers), 
and the cost of entry level systems. It described uncontroUabiUty as the 
relationship between the difficulty of controlling computers and the 
willingness of government and industry to meet the costs of tracking and 
controlling them- Tl^e study asserted that as U.S. hpcs were sold openly for 
2 years, their export would become uncontrollable. Part of the study’s 
rationale was that, as older hpcs are replaced by newer models 2 years 
after product introduction, original vendors may no longer have 
Information on where replaced hpcs are relocated. The study also 
presumed a levd of “leakage" of computers to countries of concern from 
U.S. HPC sources and asserted that costs of controlling such leakage were 
no longer toierjd)le. However, the study did not attempt to calculate or 
specify those co^. In addition, the study suggested only v^e thresholds 
for these six factors to determine “uncontroUability." For example, it 
noted that the threshold at which it becomes difficult to track numbers of 
units could vary fixMn 2(X) to several thoiisand. The study did not provide 
analysis or empirical evidence to support its assumptions or conclusions. 


•The Commerce Oepartraent staled that Departmenl of Defense (DOD) infonnation, which showed 
Chat a number of signi/tcant militaiy a^licalions are run at performance levels above 7,000 MTOPS, 
also supported the Stanford study’s conchison that an HPC control threshold at this level could be 
jusCfiable. 
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National Security and 
Proliferation Risks of 
HPCs Not Assessed 


Although the Stanford study was tasked with assesnng the capabilities of 
countries of concern to use hks for military and other naticmal security 
applications, it did not do so. The study discussed only U.S. applications of 
HPCS for militaiy purposes. Accordii^ to the study’s principal author, data 
on other countries' use of hpcs fcNT miUtary and other national security 
purposes was insufOcient to make such assessments because the U.S. 
government does ik^ gather su(^ data in a systematic f^hiort The report 
recommended th^ such an analysis be done. 

De^ite the study’s limitations and recommendaticms to gather better data 
in the future <m oth^ countries’ use of hpcs for military and oUier naticmal 
secuii^ purposes, the executive branch raised the irrops thresholds for 
HPC export controls and establiahed the four-tier export control structure. 
Ihe former DepuQr Assistant Secretary of Defense for 
Counteiproliferation Policy explained that because dod was not tasked to 
ccmduct a threat assessment, it did not do so. Instead, the executive 
branch assessed countries on the basis of six criteria and assigned them to 
a particular tier, llie six criteria were (1) evidence of on-going pro^ems of 
national security concern, irtcluding proliferation of weapons of mass 
destruction with associated debveiy ^sterns aiKl regional stability and 
conventional threats; (2) membership in or adherence to non-proliferation 
and export centred regime^ (3) an effective export ccmtrol system, 
including enforc«nrat and compliance programs and an associated 
assessment of diversion risks; (4) overall relations with the United States; 
(5) whether U.N. sanctions had t^n imposed; and (6) prior licensing 
history. 

Prior to the executive branch’s decisiem to change computer thresholds, 
scientistB at Department of Energy (DOS) natitmal laboratories and other 
U.S. govenunent ofScials had accumulated information to show how 
countries of cemeem could use hpcs to facilitate the design of nuclear 
weapons and to improve advanced nuclear weapons in the absence of 
tests of nuclear explosives. However, this information was not used as 
part of the decisionmaking process for revising hpc export controls, 
according to the Commerce Department In December 1997 the House 
Committee on National Security directed the doe bikI dod to assess the 
national security impacts of exporting hpcs with performance levels 
between 2,000 and 7,000 mtops to tier 3 countries. In June 1998, 2 and 
1/2 years after the executive braitch revised hpc export controls, doe 
concluded its study on how countries like China, India, and Pakistan can 
use HPCS to improve their nuclear pn^rams. 
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Acc<Nfding to the DOe study, the in4>act of hpc acquisiticm depoids on the 
c<Mi4>lexity of the weep<M\ bting developed and, even more in^KMtaittly, on 
the availability of hi^vquaiity, relevant test data. The stucfy c<Hicluded that 
‘ihe acquisition and ai^>lication of hpcs to nuclear weap<Mis develq;>ment 
would have the neatest potential inq>act on the Chinese nuclear 
pix^ram — particularly in the event of a ban on all nuclear wei^ns 
testing.” Also, the study indicated that India and Pakistan may now be able 
to make better use of hpcs in the 1,000 to 4,000 mtops range for their 
nuclear weapcms programs because of the testii^ data they acquired in 
May 1908 fixMn underground detcmations of nuclear devices. The potential 
c<mti1bution to the Russian nuclear program is less significant because of 
its robust nuclear testing experience, but hpcs can make a contributicm to 
Russia's confidence in the reliability of its nuclear stockpile. An emerging 
nuclear state is likely to be able to produce only rudimentary nuclear 
weiqKMts comparatively simple designs, for which personal computers 
are We were told that dod's study of natitMial security inq>acts 

had not beat OMnpleted as of September 1, 1998, in part because tlw 
Department had not received requested information firom the Ccunmerce 
D^Murtznent imtil after July 1. 


Advances in Computing 
Technology May Pose 
Long-Tenn Security 
Challenges 


Ihe StanfcMxl study noted ttiat trends in hpc technc^ogy develqpment may 
pose security and expert contnrf <d^cmges and recommended further 
study to determme their inq>lications for natkmal security and exp<Mt 
controls. 

The technology treiKis of concern include other countries’ ability (1) to 
upgrade the performance of individual conq>uters and (2) to link 
Imfividual ccunputen to achieve higher pafoimance levels. Ihe StanfMd 
study team reviewed the ccMiqHitor industry's technolc^cal advances in 
pira Mei processing and ccmcluded that sudi advances as "scalability* and 
"dustering* contributed to the uncontrcrflability high perftmnance 
computing worldwide and ate inevitably redudng the effectivemss of U.S. 
expcNt controls. ^ "Scalability* refers to the capability to Increase 

cooqnrier performance levds a system by adding processor boards <Nr 

by acquiring increasing powerful mictt^Mocessors. "Clustering" refers to 
connecting mmiy personal congnitefs or workstations to achieve highv 
convuCing performance in a netwwk o( interccmnected systems, wmldi^ 

cooperatively aird concurrently on oite or several tasks. 
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ScalabUiQr and clustering offer cq^itunities to increase coiiq>uter power 
without the need to develc^ custcmi-built single processors trsditicniaUy 
used in hpcs. Some ^pes of hks are designed today to allow scalability 
without the need for vendor support or even knowledge.^* As a result, 
some HPCS could be exported bdow krrops threslKdds without an 
individual license, stkI, in theory, later covertly scaled up to levels that 
exceed the threshold. We asked government agencies for infotmation 
about diversions and violatioi^ of U.S. hpc export ccmtrols, but they 
provided no evidoKe that countries of coiM^em have increased the 
computing power of U.S. exported machines in violaticm of export 
restrictions. 

We found no U.S. govemmott reviews of alternatives to address these 
security concerns, although authors of the Stanford study and others with 
iA^om we i^ke identified various cations that could be assessed, lliese 
include (1) requiring government review and consideration of machines at 
their hipest scalable mtops performance levels and (2) requiring that hpcs 
exported to tier 3 countries be physically modified to prevent upgrades 
beyond the allowed levels. 


'Hie executive branch’s January 1996 export control revision (1) increased 
thresholds for requiring licenses, which resulted in a reduction in the 
numbers of lic«tsed hpcs; (2) shifted some of the government’s end-use 
screening responsibiliQr fkom the government to the conqHiter industry, 
until this policy was revised in 1998; and (3) required hpc manufacturers to 
keep records of the end users of their hpc exports. The government 
continued to have responsibility for post-shipment verifications for hpcs, 
which have reduced value as traditicmally conducted. 


License Applications Have ^ce the export c<xttrols for conq)utets were revised in 1996, hpc export 
Decreased Since Revision Kcense appUc^ons have declined from 450 ai^licatiOTis in fiscal year 1995 
to 125 « 4 ;>pUcatioru in fiscal year 1997. In fiscal year 1995, the Corrunerce 
Department ^proved 395 license applications for hpc erqpcwts, and deiried 
1. In fiscal year 1^7, Commerce iq)proved 42 licoise appUcaticms for hpc 
exports, and denied 6. The remainder of the ^>plical3(ms in each year were 
withdrawn without actkm. Changes in the numbers of both hceitsed and 
unlicensed exports might not be attributed entirely to the chai^ in export 
controls. However, we did rK>te stMne dwracteristics of U.S. hpc exports 

"Ibny HPC deafpis xme co ro mrc ii l, og-cha«>t etf pao cea ww, sadi m (boM Ibimd In penonai 
convwefi or Kiend&c workMki**, Md mqr Mude huiKbcdi or even thooMMk of iMocaRxs. 


Changes in U.S. 
Licensing and Export 
Enforcement Since 
the Revision 
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since the revision. For exair^le, while hpc exports increased to each tier 
from Januaiy 1996 through September 1997, 72 percent of machines were 
sold to tier 1 countries. Also during this period, 77 hpcs were exported to 
China and 19 were exported to India, all without individual licenses. Most 
U.S. HPCS exported in this period (about 85 percent) had performance 
levels between 2,000 and 5,000 mtops. (See appendix in for details on hpc 
exports.) 


End-Use Screening 
Responsibility Shifted to 
Computer Industry 


The executive branch shifted some government oversight responsibility to 
the computer indu^iy, especially for tier 3 countries. Exporters became 
responsible for determining whether exports required a license by 
screening end users and end uses for military or proliferation concerns 
(end-use screenirtg).^ However, some industry and government officials 
concluded that the computer industry lacked the necessary information to 
distinguish between military and civilian end users in some tier 3 
countries — particularly Chirta. 

Because of concerns about U.S. hpcs being obtained by coimtries of 
proliferation concern for possible use in weapons-related activities, the 
Congress enacted a provision in Public Law 105-85 that required exporters 
to notify the C^mimeice Department of all proposed hpc sales over 
2,000 MTOPS to tier 3 cotmtries. Ihe law gives the government an 
opportunity to assess these exports within 10 days to determine the need 
for a license and it can use information that may not be available to the 
exporter. 


U.S. Companies' Records 
on Resales of HPCs Are 
Incomplete 


Pursuant to the Export Administration Regulations, exporters are required 
to keep accurate records of each licensed and unlicensed export of a 
computer over 2,000 mtops to any destination. These records are to include 
names and addresses of each end user and each "intermediate consignee” 
(resellers or distributors). Exporters must also provide quarterly reports to 
Commerce on ticense-exen^t exports — almost 96 percent of the total hpc 
exports in the past 2 years. 

The government relies on the exporters’ data for end-use information, but 
we found that ccmrpanies had reported inconsistent and incomplete data 


'H'o aid cxpoTtera in maidng end user detenninations, Commerce created specific guidance to educate 
exporters about aigra they need to be aware of that can be of concern to the government Companies 
also were urged to contact the Commme Department when in doubt about an end user's activities. 
According to Commerce, the end user could then be researched by the government and the exporter 
advised to seek a license if any strategic concerns were present 
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fcv intermediiUe consignees (resellers or distributors) as end users. For 
example, one company rq;>orted data fw only one intamediate consignee, 
even though company officials told us that the omqpany uses multiple 
resellers. Company officials noted that the conqp>ai^ sells computers to 
c<Mnpaniea in other countries, which then sell the con^uters to other, 
unloMwn end users. A second conq>any provided “end-use statements” 
from its resellers, rather than the actual end usas, and identified 
conq)uters' end use for several overseas sales as “resale.” In contrast, a 
third company shows its resellers as resellers, rather than as end users. 
CoiTq>any officials said that the ccanpany contractually requires its 
resellers to identify artd provide end-use statemaits from the ultimate 
endorsers. 


Safeguards Procedures for 
Verifying the End Use of 
HPCs Are Limited 


U.S. government officials agreed that the way psvs of computers have been 
traditicmally conducted have reduced thm value because such psvs 
est^rfish only the physical preserKre of an hpc. However, this step assures 
the U.S. government that the con^mter has ruH been physically diverted. 
Acconfing to doe laboratory offid^ it is easy to ccsic^ how a coirqputer 
is being used. They believed that the U.S. government officials performing 
the verificatiCNns cannot make such a detominaticm, partly because they 
have received tto computer-specific training. AtthcMigh it is possible to 
verify how an hpc is being used throu^ such actions as reviewing internal 
co^^)uta‘ data, this would be costly arui intrusive, and require experts’ 
sophisticated computer analysis. 

Another limitation of psvs crmcems sovereignty issues. Host governments 
in some countries o[ greatest ccmcem, notably ChiIU^ have precluded or 
restricted the U.S. government’s ability to ccmduct psvs. Three European 
countries that we viated — ^United Kingdcxn, Germarty, and France — also 


The revision of hpc expcHt controls did not reduce the govenunent’s 
responsibility f<« obtain safeguards procedures, notably ccmducting psvs. 
Under current law, Commerce is required to ccmduct psvs for all hpc 
exports over 2,000 mtops to tier 3 countries. While ps>q are inqmrtant for 
detecting atul deterring i^tysical dtversicMrs of hfcs, psvs, as ti^ticmally 
conducted, do not verity computer end use. Also, some countries do not 
allow the United States to ccmduct them. China, for exanq)le, had tKit 
allowed psvs,‘^ but in June 1998, it T^>ortedly agreed to do so. 


'*iii Uw iMt 3 catendw yews, us emba^ cfBdili conducted 20 PSVs ot digital con^Hitera. bi 
addMon, during 1907, Co rom erce ofllciali on Kama from hea dq nar tera also coiMhicled 19 visits 

to HPC locatiora. 
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do not allow U.S. government ofBdals to do psvs. However, they perform 
the checks themselves and provide the results to the U.S. govemmait 

The government makes limited efforts to mcmitor exporters' and end 
users’ conv)liance with explicit conditions attached to export licenses. It 
relies largely cm hpc exporters for aid use monitoring and may require 
them or the end users to safeguard the expcnts by limiting access to the 
coiTq)uter8 or inspecting ccnnputer logs and outputs. The end user may 
also be required to agree to on-site inflections, even on short notice, by 
U.S. government ai exporting ccmfiany officials, viho would review 
pro^ams and software used on the ccnnputer, or to remote electnmic 
moiutoring of the corrqiuter. Commerce ofBdals stated that they may have 
reviewed ccmiputer logs in the past, but do not do so ai^more, and said 
chat they have rwit conducted any short notice visits, and that they do not 
do remote monitoring. 'Diey said that, ultimately, immitoring safeguards 
plans is the expcMter’s refxmsibility. 


Current Foreign 
Availability of HPCs 


As requested, we evaluated the current forei^i availability oi Using 
the eaa’s general descriptkm of forei^i availability as our criteria, our 
analysts showed that subsidiaiies oi U.S. congmnies dominate the 
overseas sales of hpcs. Ihese computes primarily compete against one 
another with Umited con^idltion from foreign suppliers in Japan and 
Germany. We also obtained information on the ciqiability of certain tier 3 
countries to build their own hpcs and found it to be limited in the 
cfMbility to produce machines in cimiparable quantity, quality, and pow^ 
as the HPC-suppUer countries. 

Hie BAA describes foreign availablUty as goods or techncrfogy available 
without restriction to controlled deirtinadons from sources outside the 
United States in sufficient quantities and ccmifwrdrfe quality to those 
produced in the United States so as to render the controls ineffective In 
adiieving tMi purposes. We found that the only gk^ coiiq>etitors for 
g«iecal conqHtter techncdogy are three Jfmnese conqmnies, two of whidi 
(xmqide primarily f<v sales (tfhl^i-end conqHiteis — systems sdd insmaO 
votumes and performing at advanced levda. Two of the cmiqianies 
repcKted no HPC exports to tier 3 countries, while the third cOTipaity 
r^KMted some exports on a regtonal, rather than cmintiy, basis. One 
German company sells HPCS {Himatity in Europe and has reported sevttal 
sales its HPCS over 2,000 MTOTS to tier 3 countries. One foitish conqMtfiy 
sittd it is capable of producing hpcs above 2,000 itfops, but conpany 
officials said it has never wM a sydem outside the European Uidon. 
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A 1995 Commerce Department study of the hpc global market showed that 
American dominance had prevailed at that time, as well. ITie study 
observed that Am^can hpc manufacturers controlled the market 
woridwide, followed by Japanese companies. It also found that European 
companies controlled about 30 percent of the Eun^>ean market and were 
not competitive outside Europe. 

The other countries that are hpc suppliers to countries outside Europe also 
restrict their exports. Ute United States and J£ 4 >an since 1984 have been 
parties to a bilateral arrangement, referred to as the “Supercomputer 
Regime,” to coordinate their export ccmtrols on hpcs. Also, both J^>an^* 
and Germany, like the United States, are signatories to the Wassenaar 
Arrangement, which has membership criteria of adherence to 
non-proliferation re^mes and effective escport controls.*^ Elach country 
also has natKxial regulatioits that gei^rally ^pear to afford levels of 
protection similar to U.S. regulaticms for their own and for U.S.-licensed 
HPCS. For example, both countries place e3q>ort controls on sales of 
computers over 2,000 krrops to specified destinaticms, according to 
German and Japanese government officials. However, foreign government 
officials said that they do not mforce U.S. reexport controls on unlicensed 
U.S. HPCS. In fact, a study of German export controls noted that regulatory 
provisions specify that G«many has no special provisions on reescport of 
U.S.-orlgin goods. According to German government officials, the exporter 
is responsible feu* knowing the reexport requirements of the hpc’s country 
of origin. We could iu>t ascertain whether improper reexports of HFCS 
occurred fiom tm* 1 countries. 

Because some UjS. government and HPC industry officials cemsider 
indig^ious capid)ility to build hpcs a form of foreign availability, we 
examined such capabilities for tier 3 countries. Available infexmatiem 
indicates that the capabilities of Qiina, India, and Russia to build their 
own HPCS stiU lag well behind that of the Uitf ted States, Japan, aiKl 
Eurc^rean countries. Althou^ details are itot wdl-known about hpc 
devd< 9 inents in each tA these tier 3 countries, most officials and studies 
showed that each country still produces machines in small <piantities and 
lower quality and power cc»rq>ared to U.S., Japanese, and European 
ccNi^Hiteia. For exaiTq>te, 


atoo oMatawd tefonaMiai from the Ja^ancae so ww a ea t and HPC vendon. We identilied 
conttolatwibree. but did not laa ea i their j wyhw n malka i. 
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Oiina haa produced at least two different ^pes of HPC9, caUed the Galaxy 
and Dawning series, baaed on technoiw and they are believed to 
have a pecfonnance level of about 2,500 inops. Although China haa 

announced Its latest Galaxy at 13,000 Krops, U.& govenunent officials have 
no conOnnatian of thia report. 

India haa produced a aeries of coniputen called Param, which are based 

on U.S. niicroproceasors and are believed by U.S. doe officials to be rated 

at about 2,000 UTOPS. These officials were denied access to test the 

computer's performance. 

Rusala'a efforts over the past three decades to develop commercially 

viable hpcs have used both indigenously-developed and U.S. 

microproceasors, but have suffered ftom economic problems and a lack of 
customers. According to one DOE official, Russia has never built a 
computer running better than 2,000 KTOPS, and various observers believe 
Russia to be 3 to 10 years behind the West in developing congHiters. 


A key element In dte 1906 decision to revise HPC export controls was the 

Conclusions Undln^ of the Stanford study which did not have adequate analyses or 

critical issues. In particular, the study used to Juatiiy the ilecision did not 

assemble empirical data or analysis to support the conclusion that HPCS 

bdow specUlc performance levels were uncontrollable and widely 
available worldwide. Moreover, the study did not analyxe the capabilities 

of countries of concern to use HPCS to hitther their mUitary programs or 
engage in nuclear proliferarion, but rather recommended that such data be 
gathered and such arudysls be marie. Despite the limitations of the study, 

the executive branch revised the HPC export controls. Since the executive 

branch’s stated goals for the revised HPC export controls included tailoting 
control levids to security arsi proUferation risks of specinc destinations, it 
becomes a vital factor to detetmits! how and at what performance levels 

specific countries would use hpcs for military and other national security 

applications and how such uses wrruld threaten US. national security 

interests in spedlic areas. In aiidition, the Stanford stuiiy hientified trends 

in HPC techndogy development which may pose security and export 
control chaUengea for national security and export controls. Some 
alternatives to address these security challenges have been identified by 
authors of the Stanford study and others with whom we spoke, and could 

be assessed. 


RecommendatifHis 


To complement the studies undertaken by DOD and DOE for the House 
Committee on National Security, we recommend that the Secretary of 
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D^ense assess and rep<Mt (m the national security threat and proliferation 
impact of exports of hpcs to countries of natiixial security and 

proliferation ctmcem. This assessment, at a minimum, should address 
(1) how and at what peifoimance levels coimtries of concern use hpcs for 
military modemizaticm and proliferation activities; (2) the threat of such 
uses to U.S. national security interests; and (3) the extent to which such 
HPCS are ccmtrcrflable. 

We also recommend that the Secretary of Commerce, with the support of 
the Secretaries of Defense, Energy, and State, and the Director of the U.S. 
Arms Control and Disarmament Agency, jointly evaluate and report on 
opti<ms to safeguard U.S. naticmal security interests regarding hpcs. Such 
options should include, but not be limited to, (1) requiring government 
review and control of the escport of computers at their highest scalable 
MTCH« performance levels and (2) requiring that hpcs destined for tier 3 
countries be physically modified to prevent upgrades beyond the allowed 
levels. 


Agency Comments 
and Our Evaluation 


Commerce and dod each provided one set of general written comments on 
a draft of this and a companion report'^ and the Departments of State and 
Energy and the Arms Ccmtrol and Disarmament Agency provided oral 
comments. Commerce, Defense, and State raised issues about various 
matters discussed in the report. The Department of Energy had no 
comments on the r^>ort but said it deferred to Commerce and Defense to 
comment (mi the Stanford stucfy. Ihe Arms Ccmtrol and Disarmament 
Agency agreed with the substance of the report Commerce, State, Energy, 
and the Arms Ccmtrol and Disarmament Ag^cy did not comment on our 
recommendations, but Defense did. Defense said that our 
recOTunendation coiK%ming the assessment of national security threats 
and proliferation impact of U.S. exports to countries of concern was done 
in coimection with the 1995 decisitm to revise hpc export controls, and 
that it would consider additional optiorrs to safeguard exports of hpcs as 
part of its ongoing review of export controls. As noted bdow, we believe 
the question of how countries of concern could use hpcs to further their 
military and nuclear programs was not addressed as part of the executive 
branch's 1995 decision. 

Commerce commented that the President's decisirm was intended to 
change the computer export policy from what it referred to as "a relic of 
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the CcMi War to (me more in tune with today’s technology and 
international securi^ environment” Commerce said the decision was 
based on (1) rs^iid technological changes in the computer industry, 

(2) wide availability, (3) limited controU^ility, and (4) limited national 
security applications for hpcs. Commerce provided additiimal views about 
each of th^ factors. Crmunerce commented that our repcut focused on 
how countries mi^t use hpcs for proliferation or military purposes and cm 
it called an outdated Cold War concept of “foreign avail^ility,” 
r^her than these factors. 

Our report specifically addresses the four factors Commerce said it 
considered in 1995. lltese four ^tois are considered in the Hanford 
University study upon which the executive branch heavily r^ed in making 
its decisicm to revise hpc export ccmtrols. Otu* rep(ut agreed with the 
study's treatment of technological changes in the computing industry and 
that advances in computing technology m^ pose long-term security arrd 
controllability challenges. 

Commerce commented that our analy^ of foreign availability as an 
element of the controllability of hp(s was too narrow, statii^ that foreign 
availability is not an adequate measure of the problem. Commerce stated 
that this “Cold War ccmcept” makes little sense today, givoi the 
peimedbility and iiKreased gli^alization of markets. We agree that rapid 
technological advancements in the computer industry have made the 
controllability of hpc exports a more difficult problem; however, we 
disagree that foreign availability is an outdated Cold War concefA that has 
no rdevance in today’s environment While threats to U.S. security may 
have changed, they have not been eliminated. Commerce itself recognized 
fills in its March 1998 annual report to the Congress which stated that “the 
key to effective export confix^ is settii^ control levels above foeign 
availability.” M<xeover, the cxmcept of foreign availability, as opposed to 
Conunerce's notion of “worldwide” availability, is still described in eaa and 
the Export AdministraticMi Regulations as a factor to be considered in 
export control policy. 

CkNnmerce also commented that the need to control the eiqxMt of hpcs 
because of fit^ importance for nati(Mial security ^[i^Ucations is limited. It 
stated thtf many national security ^iplications can ^ performed 
satlafiictwfly on uncontrollable k>w4evel tectuuriogy, and that conqmtns 
are not a “dKto point” for miUtaiy production. Crmimerce said that 
havkig access to hpcs alone wUl not improve a country's militaiy-industiial 
capacities. Commerce asserted that the 1995 decision was based on 
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research leading to the conchisicm that computing power is a secondary 
consideration for many applications of national security ccmcmt We 
asked Commerce for its research evidence, but none was forthccaning. The 
only evidence th^ Commerce cited was contained in the Stanford study. 

Moreovtf , Commerce’s position cm this matter is not consistent with that 
of DOD. DOD, in its Militaiily Critical Technol<^es list,‘^ has determined 
that high performance computing is an enabling technolc^ fw modem 
tactical and strategic warfare and is also important in the development, 
deployment, and use oi weapcms of mass destructicai. Hi^ performance 
computing has also played a n^ior role in the ability of the United States 
to maintain and increase the technological siq>eriority oi its war-fighting 
support systems, dod has noted in its High Performance Computing 
Modernization Program*^ annual plan that the use of hpc technology has 
led to lower costs for tystem deployment and improved the effectiveness 
of complex we^>ons systems, dod further stated that as it transitions its 
weapons system design and test process to r^ more heavily on modeling 
and simulation, the nation can expect many more examples of the 
profound effects that the hpc capability has on both military and civilian 
s 4 )plications. Furthermore, we note that the conc^ of ‘choke point” is 
not a standard established in U.S. law or regulatitm for reviewing dual-use 
escports to sensitive end users for proliferation reasons. 

In its comments, DOO said that the Stanford study was just cme of many 
sources of informatitm and analysis used in the 1996 executive branch 
decision. We reviewed all of the four sources of informaticm identified to 
us by DOD, DOE, State, Commerce, and Arms Control and Disarmament 
Agency (acda) officials as contributing to their assessment of computer 
export controls. However, the Stanford study was a kQr analytical stwty 
used in the decision-making process and the orUy source whoee findings 
were consistently and repeatedly cited by the executive braitch in official 
announcements, briefings, ccmgressional testimcmy, and discussions with 
us in support of the hpc export control revisicm. 


MiUtariiy Criticil Technoloskes Ust, raqulKd by EAA, to • compendtunt oi the technologlee D(M) 
MBeaw i J m critical to mainCaining M^ertor II.& miUtvy capabflttiea. Accordbig to D(X>, M riiould be 
used as a reference for evahiaiiB( potential tedmolocx UBisfas and to det e r min e if the p r opoaed 
transaction would permil potential adversaries acccas lo lechnotogics with specific perfotmairce levria 
at or above the diaractertotics identified as militavily oiticaL 

'*nie High Perfomunce Cong>utin( Mo de niUto ion Progra m to the nuiiar foeee detogned to btopRwe 
DOD’s ability to explott the compnttoion ntctsiBy to ledmological eu periority on the 

battlefield Managed Iqr the Director, Dcfcnae lUsee r ch and Engineering, the proy a m to Meitcled to 
establish s nationwide totefftoed m fimti u Hu re to siqiport the defenee rcaeai^ deve l opme n t, test, 
at»d evaluatian communities. 
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In its conunents. dod stated that our report inaccurately characterized dod 
as not considering the threats associated with hpc ejqx)rts. dod said that in 
1995 it ‘‘considered’' the security risks associated with the e}q>oit of hpcs 
to countries of nadoiuJ security and proliferation concern. What our 
report actually states is that (1) the Stanford study did not assess the 
ci^Dabilities of countries of concern to use hpcs for military and other 
national security applications, as required by its tasking and (2) the 
executive branch did not undertake a threat analysis of providing hpcs to 
countries of concern, dod provided no new documentation to demonstrate 
how it “considered” these risks. As the principal author of the Stanford 
study and dod officials stated during our review, no threat assessment or 
assessment of the national security iiiq>act of allowing hpcs to go to 
particular countries of concern and of what military advantages such 
countries could achieve had been done in 1995. In fact, the .^ril 1998 
Stanford study on hpc export controls by the same principal author also 
noted that identifying which countries could use hpcs to pursue which 
military applications remained a critical issue on which the executive 
branch provided little mformation. 

In its comments, the Department of State disagreed with our presenting 
combined data on hpc exports to China and Hong Kong in appendix HI 
because the U.S.-Hor\g Kong Policy Act of 1992 calls for the U.S. 
government to treat Hong Kong as a separate territory regarding economic 
and trade matt^. While, in principle, we do not disagree with State, it 
should be noted that we reported in May 1997 that given the decision to 
continue curr«\t U.S. policy toward Hong Kong, monitoring various 
indicators of Hong Kong’s continued autonomy in export controls 
becomes critical to assessing the risk to U.S. nonproliferation interests. 
Our presentation of the combined hpc export data for China and Hong 
Kong is inteiKled to help illustrate a potential risk to U.S. nonproliferation 
interests regarding hpcs should Hong Kong’s continued autonomy in 
export controls be weakened. We believe that monitoring data on hpc 
exports to Hong Kong becomes all the more iirq^ortant since Hong Koi^ is 
treated as a tier 2 country, whereas China is a tier 3 country. 

Commerce also provided technical comments which we have incorporated 
as appropriate. Commerce and dod written comments are reprinted in 
appendixes IV and V, respectively, along with our evaluation of them. 


‘*Hons Kom's Reversion To Oiina: Effective Monitorin£ Critical to Assess U.& Nonprdlfenticm Risks 
(CAOWSly^-Ud. Uay iMT). 
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ACDA provided oral comments cm this repcxrt and g^eralty agreed with it 
However, it disa^-eed with the statement that “according to the Commerce 
Department the to effective expcxt cxmtrols is setting control levels 

above the level of foreign availabili^ of materials of concern.* acda 
stressed that this is Ccmunerce’s position only and not the view of the 
entire executive branch, acda said that in its view (1) it is difficult to 
deteimine the forei^ availability of hpcs and (2) the United States helps 
create foreign avail^ility through the transfer of (X>nq>uters and computer 
parts. 

Our scope and medK>dology are in aiHpeiKlix L ^pendix n ccmtains details 
on the four-tier sy^em of eiqpoit controls and tqqpaidix in shows 
characteristics of hpc exports since the revisicm. 

We conducted our review between August 1997 and June 1998 in 
accordaiKe with generally accepted government auditing stattdards. 


We will provide cc^ies of this r^x>rt to other ccmgressicmal committees; 
the Secretaries of Commerce, D^ense, Energy, and State; the Director, 
U.S. Arms Control and Disarmament Agency; and the Directed, Office of 
Management and Budget Copies will be provided to others upcm request 

Please contact me on (202) 512-4128 if you or your staff have any 
questions concerning this report M^or cemtributiMS to this report are 
listed in appendix IV. 

Smeerety yours, 


Harold J. Johnson, Associate Directed' 
International Relaticms and Trade Issues 
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Scope and Methodology 


To nmm the basis for the U.S. govenunent’s 1996 ded^on to change hpc 
contrds, we reviewed a 19% Stanford Univernty shidy on hi^ 
pnfbimance computing and expcMt (KMttrd polity c<xninissioned die 
Commerce and Defense Departments and evaluated the executive 
branch’s assessment of n^cmal security risks of hpcs. We reviewed 
several classified charts and briefing slides prepared by the inteD^ence 
community and dod that were Identified as inqMxtaiU siq>port fen* the 
revision of ctmtrols. We also talked with the Hanford stu^s principal 
authcMis to discuss their methodology, evidoice, c<mclusi<m5, and 
rectMiunoidations. hi addition, we met with the D^>artm«>t of Defense 
(dod), the Dq;>artment of Eitergy (dob), Sta^ and Cc»nm«x:e D^MUtment 
nffi rialu to the interagency process used leading iqp to the decidon 

to revise controls on hpcs. We also requested, birt were d^ed access to, 
informatkm from the National Security Council on data and analyses that 
were used in the interagency forum to reach the firud dedskm to revise 
controls. 


To determine how the government assessed the national security risks of 
allowing the hi^ performance computers (hpc) to be provided to 
countries of proliferatkm and military concern as part of the basis for the 
decision to revise the controls, we reviewed dod ami D(« documrats cm 
how HPCS are being used fcH’ nuclear and military ai^Ucations. We 
discussed hi^ performance computiitg for both U.S. and foreign nuclear 
weapems pro^ams with wx officials in Washington, D.C., and at the 
Lawrence UverrmHa, Los Alamos, and Sandia National Laboratmies. We 
also met with officials of dte DOD HPC Modemizmion Office and other 
officuUs within the Under Secretary o( Defense Acquisition and 
Technology, Office of the Secretary of Defense, the Joint Chiefs of ^aff, 
and the intelUgertce community to discuss how hpcs are being utilized for 
weapons design, testing and evaluation and other military aiH;»licall(ms. 
Furthermore, to und^stand the trends occurring in onnputer technolc^, 
we analyzed hpc model descriptions and teclmical means for increasing 
conqHitlng performance. 

To Identify changes in licowing activities and the inq>lemaitatKm of 
certain U.S. licensing and export enforcement requirements since the 
revWon: 


We reviewed two sets of data firom the Ctmunerce Department, as noted 
above, in cxtler to determine trends In American hpc exports since the 
1996 revision (^controls. We examined all U.S. hi^ performance 
computer^dated Ucertse an>lications worldwide. We analyzed the data fu- 
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tiends mkI chMiges in levds of HK eiq>ort8 before and after reviskm 

of centre^ numbers of tkenses an>roved, denied, and withdrawn without 
action, and tCK exports by countries and country tiers. We did not review 
the data for completeness, accuracy, and consiataKy. 

We reviewed the end user and end-t»e scieoiing qnstems ot malor 
American hpc manufacturers, CtMnmerce Departm^t iii 4 >lanetitation oi 
the revteed regulatkms, and selected foreign government export coitfit^ 
in orda to determine licensing changes affecting US. hpc eiq>oitm since 
the revittcm ot coidrola. We also reviewed ^)|^icable U.S. laws simI 
regulations governing hpc exptxt lte^:wittg and enfixeement stmI discussed 
these laws arai r^ulatitms with Conunorce Department (^dals. We 
obtained Conunerce Department procedures on end use and aid user 
determinationa as well as records on hpc vendor inquiries to Ctxnmerce on 
Old users. In addition, we reviewed informatkm on intdl^ence 
ermununity assessments of foreign end usos receiving hpc exports. We 
^t jianiwid end user and aid use screening procedures wttti oflSdals 
(txm major U.S. hpc manufacturers— Digital Ec^ment Corporatian, 
HeiMdett Packard/C(»vex, International Business Madiines, and Sun 
Microsystems — at th^ corpex^ offices in the United States and sales 
otBxxs overseas. We also vi^ted representatives of these companies’ 
foei^i sub^diaiy offices fitxn China, Germany, Russia, SingaptMre, Soudi 
Korea, and the United Kingdom to review end use acreoiing procedures 
and documoHation for selected exports. In additiai, we visited selected 
hpc ates in China and Russia. However, the Chinese government refused 
us permission to visit ont of three requested sites in BeUing. The Russian 
govonment, while not den^ng us pennission to visit one site in-country, 
required an extended period of notificOion that went beyond our 
timeframes. Silicon Graphics, Inc Xniy refused to meet with us pending 
the outcome of an ongoing criminal investigation. 

We reviewed Commerce D^Hutment data on pre4icense and 
post^hipment verification (psv) checks on hpcs and related technerfogy 
and safe^iards secuiiy plans associated with hpc expext licoises in oeda 
to examine affects of licenang changes on government ovoai^ We 
discussed the implementatl<Mi and utility of these checks with <^ficiate of 
the U.S. govenunei^ American cranpirter cranpanies, and host 
governments in the courtfries we visited. 

To determine foreign availability of hpcs, we reviewed the Export 
Administntflon Act (eaa) and Export AdminMrallon R^ulatim for 
criteria and a descriptkm of the meaidng of the tom. We fiiai reviewed 
market research data from an independent computer research 
(Xganization. We alao reviewed lla^ brodiures, and maitetlng 
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information from mayor U.S. and foreign hpc manufru^turers in FVance 
(Bull, SA), Germany (Semens Nixdorf Informaticmssysteme AG and 
Parsytec Computer GmbH), and the United Kingdom (Quadrics 
Supercomputers Worid, limited) and met with than to discuss their 
existing and projected product lines. We also obtained market data^ as 
available, from three Ja 4 >anese hpc manufacturers. Furthermore, we met 
with government officials in China, France, Germany, Singapore, South 
Korea, and the United Kingdom to discuss each country’s indigenous 
capability to produce hfcs. We also obtained information from the 
J^MUiese govemmoat on its export control policies. In addition, we 
obtained and analyzed from two Commerce Department databases 
(1) worldwide export licouing application data for fiscal years 1994-97 
and (2) export data frt>m computer exporters provided to the Departmoit 
for all American hpc exports between January 1996 and October 1997. We 
also reviewed a 1995 Commerce Department study on the worldwide 
computer market to identify foreign competition in the hpc market prior to 
the export control revision. ‘ To identify similarities and differences 
between U.S. arui fc»eign government hpc export controls, we discussed 
with officials of the U.S. embassies and host governments information on 
foreign govemmott export controls for hpcs and the extent of cooperation 
between U.S. and host goverrunent authorities on investigations of export 
control violations and any hpc diversions of hpcs to seitsitive end users. 

We also reviewed foreign government regulations, where available, and 
both foreign government aiul independent r^>orts on each country’s 
export control system. 


M, OoW Si^ircoipliT fcidUy awt Mwrlwrt Amtmamti , Jane 2, 1906, DcpvtneM at 
Qamm mnt , B mtm at Bqiwt A ik p W i limM t, OIBct of SWMgtc totf aWilu and Ecowwac Secarky, 
Bcow o w i c Di vl i to> 
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Appendix II 

Current Export Licensing Requirements for 
High Performance Computers 


Table n. 1 and the descr^tion that follows sununarize the terms of the 
revised export controls for hpcs and according to their mtops levels and 
destinations. 

Table 0.1: Current Export Ueeneing Requirement* for High Pofformaneo Computer** 

MTOPS 

Tterl 

TIera 

Ttor3 

T)er4 

20,000 and up 

No license required License artd additional 

under license exception^ safeguards may be 
required 

License required 

License required 

Presumption of denial 





Various terrorist and 
boycott restrictions apply 

10,000 to 20,000 


License required 



up to 10,000 


No license required 
under license exception 



2,000 to 7,000 



License required for 
militery or proilleration 
end users or end use 





No license required for 
civilian and user under 
license exception 





Ten-day review period 
for goverrvnent review 


Up to 2,000 



No license required 
under icense exception 

License required to 

Sudan & Syria at or over 

6 MTOPS 

and lor any MTOPS to 
rest of tier 


' For Mcti tier, exporter* must mairttBin artd provide record* 10 the Commerce Department and 
reexport and retransler reetrictions appty. 


*A Kcenea exception (or is a regulaicry authorization that aHoivt exporter* to export or 
•eeiqMrt. based on MTOPS levels and destinalion, computers that olharwiaa would raquira a 
licanee. 


Th© R6ViS6d Controls revised controb announced by the President divide into four country 

groi^, as ft^ows; 


• Tier 1 (28 countries: Western Europe, Japan, Canada, Mexico, Australia, 
New Zealand). No priOT government review (licaise exception) fcx* all 
ctMvvuters, but companies must keep records on higher perftxmance 
shi|Nnents that will he |»ovided to the U.S. govMiunent, as directed. 
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Tier 2 (106 countries: Latin America, South Korea, Association of 
Southeast Asian Naticms or ASEIAN, Hui^aiy, Poland, Czech Republic, 
Sovak Republic, Stovada, South Africa). No prior government review 
(license exception) to 10,000 mtops with rectutl-keeping and r^)orting, 

as directed; individual license (requiring prior go^^nment review) above 
10,000 MTOPS. Above 20,000 mtops, the government may require certain 
safeguards at the end*user locatirm. 

Tier 3 (50 countries: India, Pakistan, all Middle East/Ma^ueb, the f<»mer 
Soviet Uiuorr, Chma, Vietnam, rest of Elastem Eurcq>e). No prior 
government review (license exceptirm) (q> to 2,000 mtots. Individual 
license for military and proliferaticm-related end uses and end users and 
licerrse exception (or end users between 2,000 mtops and 7,000 mtops, 
with exporter record-keeping and r^KMting, as directed. Individual license 
for all end users above 7,000 mtops. Above 10,000 mtops, additional 
safeguards may be required at the end-user locatkm. 

Tier 4 (7 countries: Iraq, Iran, libya, North Korea, Cuba, Sudan, and l^ria). 
Current policies omtinue to apply (Le., virtual embargo on computer 
exports). 

For all these 9 t>upa, reexport and retransfer provisions continue to sq)ply. 
The government continues to implem^t the Eithanced Proliferation 
Control Initiative, which provides authority for the government to block 
exports oi cc»rq>utefs of any level in cases involving exports to etK) uses or 
end users of proliferation concern or risks of diversion to proliferation 
activities. Criminal as well as civil penalties apply to violators of the 
Initiative. 
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Appendix in 

U.S. High Performance Computer Exports 
Since the 1996 Export Control Revision 


HPC exports have increased significantly since the 1996 export control 
revision. Figure 10.1 shows the numbers of U.S. hpcs exported to all tiers 
from fiscal year 1M4 through fiscal year 1997. In fiscal year 1996, U.S. 
computer vendors exported almost twice as many hpcs as they had in 
fiscal years 1994 and 1995 together. In fiscal year 1997, U.S. exports of 
HPCS more than qu^irupled the fiscal year 19% level. Figure in.1 also 
shows that ^owth in export volume was strong for tier 1 countries. 
Although tier 2 growth remained ahead of tier 1 for the whole period, the 
greatest volume of U.S. exports has been with the tier 1 countries. 

Table II1.1 shows the largest importers of U.S. hpcs. U.S. allies and friends 
remained the largest market for U.S. hpc exports, but tier 2 countries were 
the fastest growing ntaricet. Figure III.2 summarizes the share of U.S. hpc 
exports that each tier took in this period. Figure ni.3 shows the top five 
customers for U.S. hpcs and the portion of the exports they received. 
Finally figure 1II.4 shows that most hpcs exported in the past 2 years were 
rated between 2,000 and 3,000 mtops. 
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Figura III.1 : Numbar* of U.S. High Pfionwnco ComputM Exportod to AH TIora. Flaaal Yaara 1994 Through 1997 



Note: This shows th« number ot Hems licensaa for export rateO at above 1 ,500 MTOPS for fiscal 
years ldd4 and 1995, as w^l as the number of items at or above 2.000 MTOPS for fiscal years 
1996 and 1997 reported as exported. The regulations changed in January 1996. so that first 
quarter fiscal year 1996 data includes HPCs ai above 1 .500 MTOPS and the second quarter 
includes 18 machines rated at between t .500 and 2.000 MTOPS licensed for export in 
January 1996 
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Since the Januaiy 1996 revision, 68 countries worldwide, out of 193 in the 
tier system, purchased 3,967 U.S. hpcs,^ as oi September 1997. ITiese 
machines represent a total hpc confuting powa-, as calculated in mtops, of 
over 15 million Mrrops. Twenty-six countries lead the world as the dominant 
customers for US. hpcs. These countries purchased 91 percent of all hpcs 
sold woridwide. Together th^ purchased over 14 million mtops, 
r^resenting 93 p«cent of the hpc computing power exported from the 
U.S. in the period. Table ni.l ranks the OHintries by the quantities of mtops 
they purchased, it also shows the number of hpcs they purchased. The 
countries that purchased the most machines also purchased relatively 
more powerful madiines as rated by mtops. (See table ni.l.) 


<Dmwii« on • petraM c(NW«Sc>'« ^ 

to iWed M 40133 MTOPS. EkIi or dw 3S87 HPC nacMBM to rated M Mat 2,000 MTOPS. IW 3.967 
HPCo dripped from dx Utoted Sate* m* mtortorto to oboot 37,000 Pewbaw P corapateri to tenm of 
MTOPk. 
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Tabte M.1: L«rgMt bnportara of U.S. 
HPCs, Fiscal Years 19M • 1997. 
Rsnkad by ToM MTOPS Exports^ 


Country 

FY96 

Weehirtee 

FY97 

MeeMnee 

Total 

Machinee 

torFY96-97 

Total MTOP8 
Exportadto 
Country 
FY99^ 

Tier 

Germany 

111 

488 

599 

2.600.949 

1 

United Kingdom 

87 

489 

576 

2.359.761 

1 

Japan 

74 

233 

307 

1,667.745 

1 

South Korea 

62 

269 

331 

1.128.945 

2 

Frarwe 

29 

229 

258 

1.070,385 

1 

Italy 

16 

142 

158 

601,979 

1 

Switzertand 

23 

147 

170 

500,327 

1 

Spain 

10 

123 

133 

484,862 

1 

Sweden 

20 

77 

97 

441,541 

1 

Australia 

32 

88 

120 

398,198 

1 

Netherlands 

10 

95 

105 

321.352 

1 

Belgium 

12 

88 

100 

288.194 

1 

Hong Kong 

9 

73 

82 

259,072 

2 

China 

23 

54 

77 

239,037 

3 

Brazil 

2 

66 

70 

214.350 

2 

Israel 

7 

41 

48 

200,177 

3 

Mexico 

12 

45 

57 

199.133 

1 

Malaysia 

23 

53 

76 

194.805 

2 

Singapore 

5 

60 

65 

189,729 

2 

South Africa 

e 

28 

36 

132,675 

2 

Thailand 

2 

35 

37 

110.536 

2 

Austria 

6 

25 

31 

108.449 

1 

Norway 

1 

15 

16 

107,388 

1 

Indonesia 

0 

27 

27 

91,561 

2 

Russia 

7 

21 

28 

84,961 

3 

Finland 

1 

23 

24 

81,571 

1 

Total 

598 

3.040 

3.629 

14,077,682 



As table ni.l shows, tier 1 countries, mainly U.S. friends and allies, were 
by Car the largest market for U S. hpcs. Figure ni.2 summarizes the share of 
U.S. HPC exports that each tier received in the past 2 years. 
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SiMe tiM UN Extort CoMfol I«vMm 


nguN Quanlily and PwMnt Of 
UA HPC imports to Each tin, 
January 19M -Soptombor 1997 



Itorlll 220 S.S% 


22.3% 


Source: Department of Commerce and QAO A/tatysis 


Since the export c<mtn^ were revised, hfcs have been sold to more 
countries, but 26 countries account for 91 percmt of all U.S. hfcs scrid 
woiidwide. Not <Mdy have the Tier 1 countries dominated as U.S. hpc 
customers, five U.S. allies were the largest cusUMners for U.S. hpcs: 
Germany, the United Kingdom, Japan, South Kmcs, and Firance. As 
figure ni.3 shows, these five countries together received over 52 percent of 
the machines exported. These countries also bou^t the most poweifiil 
madiines, purchasing 58.36 percent of the mtops exported In hpcs. 
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Rgiir* HU: OuMttty and Parcant of Total MacMn a a Purchaaad by Rva Largaat Cualomara for U.S. HPCa, From 
January 19M - Saplambar 1997 


United Nngdom 576 14.5% 
Jaf)» 307 7.7% 



Remaning World 1,896 47.8% 


Source; U.S. Department ot Commerce and GAO Analysis. 


The large nu^rity of U.S. hpcs exported since the revision and the lai^est 
number of most powerful computers were sent to tier 1 and 2 countries. 
For example, 50, 5, and 1 hpcs with computing power greater than 
13,000 MTOPS went to tiers 1, 2, and 3, respectively. Of the 50 countries in 
tier 3, five — China, Israel, Russia, India, and Saudi Arabia — account for 
about 84 perceitf of the computers exported to tier 3. Table QI.2 shows the 
numbers of computers each country has received. 


Tabla UI.2: Numbara of Machinaa 
Exportad to Top Fiva Tiar 3 Radpianta, 
January 1996-Saptambar 1967* 


Country 

1996 

1997 

Total 

Parcant 
of total 

China 

23 

54 

77 

35.0 

Israel 

7 

41 

48 

21.8 

Russia 

7 

21 

28 

12,7 

India 

6 

13 

19 

8.6 

Saudi Arabia 

2 

11 

13 

5.9 

Other Tier 3 

4 

31 

35 

15.9 

Tow 

49 

171 

220 

100 


■HPCs lo China and India wara eiqx>rtad with no indnnduai bcensas. Russia and Saudi Arabia 
racaivad 1 Hcansad HPC aach. wt^ Israai racaived 16 licensed machinas. 



U^. mfh p g r fo n i f re Coiqivtcr Ei^orta 
Stmem tkt lt96 Export Coatrol Bevliloa 


China, which ranks first in the number of hpcs received by a tier 3 country, 
would have received even hitter nund}ets of hpcs if its hpc totals were 
combined with those of its Hong Kong special Administrative Region. 
Hong Kong and China rank 13th and 14th, res 9 >ectively, on the hpc 
purchasers’ list (See table in.l) If Hong I&ntg and China were treated as 
erne for purposes of U.S. export ccmtrr^ and statistics^, the combined 
region would have purchas^ more machines than Italy, which ranked 
seventh in U.S. machmes exported, and almost as many machines as 
Switzerland, vdiich ranked sixth. 

Ihe largest numbers of U.S. hpcs exp<Mted were less powerful hpcs. hpcs 
at the 2,000 to 3,000 trrops level made up the bulk machines e3q>orted, 
about 58 percent of all hpc e3q)oits. hpcs at the 2,000 to 7,000 mtops level 
constitute the lai^e minority of U.S. hpc exports, about 92 percent of all 
U.S. HPC exports, or 3,638 maduiMs exported. Ihe remaining 8 percent of 
hpc erqports, 320 machines, were above 7,000 mtops. Figure nL4 shows 
these relationships. (See III.4.) 


^ oar rwart Hom Kong'* Rmnion Tb CMml- S llecSve MonitartBC OMkal to Am« us. 

May W wnliJeJ Ae iicwi lo nwritor ite 

c Bn l UM aBoaoCHoie*«»<'»»P«H<g«w«>»S”>°»""»”poncoaaol«.IJS. oflkit >i»sreedti>at 
■Kw l M cIwt Hoag looS’taMtopOBy In ihecoiMlMcl of export coiilniliii Heci!M«7 .|ivaalfaepo<eBltol 


tiaki bavolvod Md Uk U.8. poMcy conoldBent to I 
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Figure ni.4: Quantity and Percentage of U.S. HPC Exporta by MT^S Leeela, January 1996 September 1997 

S.000-6.999 MTOPS 268 6.8% 



2,000-2.d»9 MTOPS 2.310 58.2% 

Source: U.S. Department ol Commerce ano GAO analysis. 
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^pendixIV 

Comments From the Department of 
Commerce 


Note: GAO comments 
supplementing those in the 
report text appear at the 
end of this appendix. 



MB -7 I 


Mr. HodM J. Johntnn 
Anocute Oinctor 

^DMnuboaal Rdidooi aid Tnde laues 
Ooienl Aficoattoig Office 
WMhiiictan.D.C. 20548 


Thaik you fiw tbe apportBHty to eofunoa on tbe draft OAO npora «B tbe 1995 decWoolo 
reviac oqiort controls far bi^ pcrfomuaee ooafuKn (HPCe). My gaienl view b that the 
reports SK too limited in thdr nope aid ihould be tuien d e d to leOcct beoce the notomte iha 
led to the PreeideDt't decuioo to ebnge eoBfiaer oport poBey ftoB e folk of the Cold Wa to 
one mom in One with todq^'s technology and ioiennliooni eecarior CDVinameat. The Piebdeol 


ooDirollsbUity, aul limb 
Adminutntioo’e decuiee to ereete ei d 
perfbnnaioe levds. laeteedofenelyzioglfabn 
Wa coecept of 'fbnign nvalabiiity.* 


- that pliyed eriticol nkt in the 
cooqwien a vaekwe 
» Ibw on m otttdetrJ> Cold 


The United Stitee onremly domawteUfae high petfetmaice comprtiT mnriat, in pan hecaae of 
OKcompuCereiTKat policy adopted by thbAdnaniaratioD in 19M. That policy iwa cmeftiUy 
crafted and wee realistic in dedgoating wha could be ooo&dkd. The I99S coeapulcr review 
wai a tnodel for bow caqiort cootroU ihould be igipnached aad adjuded in the Poal-CoU Wa 
security envimmeoL I hive provided re rnffimnublio os to aqpmA the lepuits and make Own 
moie reflective of tbbdiacunioa- I ask that you inclnde the fbUowieg coounoas ia yov lapotti 
and Out you consider ow leomuBended chaiges to the text 

Thank you agiitt for atdichii^ the DepertneDt’s views on the dnft facets. 

Sawaely. 

( |ju^ 

W^^M.Ddey *— ^ 


Enclosures 
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GAOPwftWifMl 


^-Uk.nuy — ^tttr Mit flif nm niii 

■l9lkilkwoflritfa|wrf>aiMeea|tttn01^^ EKiiofthBKfkloaplm»critiGilraleiB 

ilf^fTTmiiiAi^ ■K* - ** * • 


‘Dk prindpil fl««r in Ifaia mdy, atd hi MsdaiioM, ti ili : 

cea^ata ippUcMioa ad feni«B tviibMIily. 


w od ideetive Ibca OQ 


Pour yenjts the Unfttd Son fatwl hi 1 a-M «o i aM te"BadA.^»M. 

ofl9SinUlfamorifaM»«kilapettkiM|«MeMd(hrrOPSX Tediy.iheava^pcnaMl 

MmMeroBedeekisBMRpowwftd. WccealdiiotirfbnliBl995toitBeRn«fcetlRBdsHd 
tMhMloDMidvacawtt lUpidptotiain 


>S npm pNiwed ^ the laMhaR fbr Dcfeoe Aariysts Ibr 


mede HPCe aHUs, di 
(be Usted Stttce ad O' 


evcf^uacMlBginrielyofaML By 199S, ufid edvoeee m miniyo ccwM i adeoftwMc^ 

the pcrfenuace kvcii OM Meodaed «tft giaM coold be oblUDed by ohUv 


HPCietcaieUer.elMver.i^krieiiietenadBdM^wliBMereUahk. Tteeai 
deebible hi the meriutplece, ooehaa evabiliqr to Gcohol the expoft of Bw^ HPCi. 


T^^Q AO report faeueee laimiUy g few%e iwiilabaity m it idaiee to the inrtiflfnfiiii 

PQ«i«nevdlehilhy^tfaeevaflehittyofhiriii)crihtM jr .^^i!a^hS^ 

m— Ar..— ,«AI. ■-gT- - - | | ,||, Ilf I „ I nj ml I II 

AmngteCtdd Wer. ACoU WircaKepiaffMatpavnUi%BHkceiialetaeeto^m 


g W wI i T ti oa of metketa. AaeeeaMaoftheilohol nattaiiDroonvulcahi I99S iblkaledtlM 

roughly 25 pcroot of HPCi we eoU outiidB ife Uthed SMee. frtBKily to nd EuQfK. 

wiA « omUct pereeotage of oKporte Ogded at Em DBopeaB. Ajio, ad Lotm Arnica 
BMckctt. lBl994alaoe.omohdfmilliaBHK:e.aiheyw«tcdKnihdined.wa«M>U 
woridwide. C(MideriagafaagciiaaIkdboworoaaMlen.«onalizBdeialyinowaa«lyaii 
thd nquniag 4 Iksooe fcr thooaadi of HPCi frooM Dot derail tha igeeMi 
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Anpewlix IV 

ComBMBta Fron the DepcrtBcat ai 
Comment 


See comment 1 . 
Now on p. 3. 


See Comment 1 . 
Nowon p. 4. 


See comment 1. 
Now on p. 4. 


See comment 1. 
Now on p. 4. 


ccnym wtoeeperfatBMBBewMbdowlJOOMTOW- to with only 500 

MTCVS. lleMWOTapeKeapiMn in tel9Mri.bnl by 1995 oweeold finding 
■iempracMMi th«tm enn powMfc), tDcb w Ae 64^ EVS, ndividmlly cqMbto 

of non An 700 MTOK of iMMMnt p««Mr. 


m « 4 D not pcovide n ap roved aiUtvy* 

lower needed lo deiitB «d nMBMiAetuR 

>«|00> w» Ae^lMMdwdl>fTCT»8,Unoi Apnfl cnnt CteActon- 

dwe A wenpnaaihw^~einMiA«fl—tiafait««eM«««n y.p>ff|Tft— >«.>«» Thekvdof 
canpeMtaoil pow0 need A dmiep eD A* boabe in Ae concat U^. nuckw meael. ibr 
em^fakaAMAAtotadAdiyA M nywort u A A aiiB. AaHPCbo^cnepieeeofAe 
paskAoaaieejtnie^wavea. nanmnejroAer pieces (e.s^kBowled|e,dcill, 


Fife 4, Um IS. A—d A teed: feceeik md i^artini tw, 

«iApertMMaeekwltof2^MTOPS. AaddiAa AteMnliidneotdb^ii* 

lAM A^ocn 
d Ae end use of eneb 


Paged, One i. Aomd A feed: " Nia e cAel e i e.baBedoBAewcridwA e avaUetiliiyofccnAAfa^ 
power AAk «nisidA l «iM iofAaA cJ aAl D g h ! e i whMrm MO li AAtoawe>A«enBA>veiaii>d> 

.w- twkpo .1 — 1.-1J. *— nrrm rnmtnh wwl t detiliAnI tint 
eAKAM." 


: *Ibe U.S. OowmBCDt berf eooaiWBatfy tedsicd A Ae cdlectt of tccbDologkal tmb 
i pcedooBAeA AcAi A Ac decinoa A deceaiiA GwqwicfB. 


ftged,lAelO. AneodAiead: "nrst^Ae AmAerefcMnpoArciVoetlkcawaiiisBddeclAed 
floai 39S A fiecnl yor...” 


RAkNAle: Aiwaatiooeboni bceoAngeeid ii l ke pioeidedoBpate >5 AdicaiesAA395iofen A 


Paged, Has iS. ABeadATCad;”.>deciiioei»iBadeeoAebamofAecnduBe, Aecetdiaer. 
«d Ae conpulcr peefenuBee capabtliqr.’' 
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^peadix IV 

Cpaiments Prom die Department of 
Commerce 


See comment 1 . 
Nowon p. 10. 


See comment i . 
Now on p. 5. 


See comment 2. 


Rrtomlo: PtcttmL 
Page 6, line It. Prior to **ndidtamka.. 


wmemet' To aid e xp on en in making cod 
a ipeciSe liit (rf*Ved flage’* and 
'know yow oumm^ guUiaee to edneate expoAan about Bgnt they need to be aware trffliat 
caobeofcoiHmatodHfevnDeeL HaeguidaBcehntbecatH^inaBniiaanfbraevenl 
yean Md note avmUUe ante Bantu ofBxportAdmittiilMum web rite. C awpamea wwe 
alao infri m eemnet the r/umg ee Dapanment when in donbt about an end uatr’s act i v i ties 
IlKcndn 

bocnae if my r t r m e gi e o 


Ralieiadc: eoam of the aoec^ng bmltB wm ^aeed eo dm apotcr, it wae done nMla 

rim.i hmf i e i | ty iiilnrartT^ltir piMtrnortrmiiit f rrrrftnrTi andtigTHtr*~"~*~~^ ThiawBa 
atronendoae afieri by the Bmean of Expect Adminionikn that dmuld not be overiooked. 

Pi^ 7. fcMtaete t. Add *of >979* afttr the Export Adm iaic oalioo Act* aad add the fiiUowing 
•eeoadaceMaeetoteAMtaote; D apaf tme n tofCon u Mrc a offieialabdkwethatttna 
deMniMBloo la mi ouldaMd Cdd War eoneept dmt baa little ^pHciMliQ' in dm canoit weald 

e n vif TWHi cat 


Pay 7^ Htm A R^laeetfaeftntietgeoceofifaeT^ p ai ag ia p hwiibibelbUgwing; “Widii^aid 
to ftirci^ availabiU^ of HPCb» a number of ooBBputer maBHfimtunn exiat oulaide the UnM 
Sariea. iw •AWtiww irft l n u mi h—m i wtaieifo jiu m s other iwMiufanhn a a am 

located in Canada. Japan. Europe, Md Aais In Bwope,Oe>many.Pnmec,^ United Kingdooi 
mi SwitBoiaod, Indigenoutljr man&etiffe um pt ilaa ibm ca n pata widi teae of lha United 
Stmei. In Alia, li^ ia a tlgnlflceBt produoer a^ eep^ilhaea alao exift in Tanna and 
a i ii gi n w ^ export cootrolt lamnibling thoae of the Uaiiad States do not eadrt. 

It ie bupoimnl to imte, however, Oat far pcoliftnacn. the iewe ii not a man nmdut capability to 

oocqieK widi U.S. prodoocn but rmfaer the capadty to make a snail numbo' of HPCe, icvudlcss 

coats, to meet natkmalneedi. Indiaitapriineexmi^eofduscitiMtion. IndmlMe IPttfa. 
India aou^ a HPCftota the UnirndStmes but was doakd an export UccaaB. Bcnionpnving 
dot it could atlU amiafy de sir e s dcsjnte our reftnala, India invested mi l Hima of doUett 

tndttocadooafdiePmmsconpoter. Ailhou^tbePanaiiin 0 tasaopfairtiGaledaaU.S. 

CT O ynvidaAe l ai n i ml n g capahility needed far wcapcosof mam d ea tiu c ti oa 
ifpHririrau Aftm dm introduetioo of thaPmms. India publicly itated (hat it oeatedthia 
. ntii y (fter wc rcAisad to aell the couatiy an nd in order to evade ow coatiob. 

Moat of dm ayateoia indlgenourty ptoduoad in Europe Bd Am have ooovutiiig powen Ihm are 

kaetlwiS,OOOMTOPS to tBgat a portion oftfaaHPCmaihattbmia large and afferdab^ The 
^meaa have eooocn&atad on naauSKturing U^KT end HPCa that cooqirta dfaaedy with those 

of dw United $«■*—- Yet, fcr more puwci ftil HPCi over 5,000 MTOPS, the United Stmea 

domiimiafdievnridamkBt However, the threat ofeouvetitioD is rtrong fcr lower and ayrtems 
below S, 000 MTOPS, which ptovidea tome iniglil to the types of ayatema for «4uch dm United 
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ftow Pwpwf UM of 


GAO Comments 


The following are GiM>'a comments on the Dq)artment of Commerce letto* 
dated August 7, 1998. Commerce provided cme set of written conunoits for 
this report We addressed Commerce’s general comments relevant to this 
report <m page 15 and its specific comments below. 


1. We have made the suggested changes, as i 4 >propriate. 

2. Commerce also ctmunented that a number of foreign manufacturers 
indigenously produce hpcs that compete with those of the United States. 
Evidence cited by C<»nmerce ccmceming particular countries with hpc 
manufacturing capabilities came from studies that were conducted in 1995 
and that did not address or use criteria related to “foreign availability.” As 
stated in our report, we gathered data from multiple goverrunent and 
computer industry sources to fitMi coiiq>anies in other countries that met 
the terms of foreign availability. We met with m^r U.S. hpc conv)anies in 
the United States, as well as with their overseas subsidiaries in a number 
of countries we visited in 1998, to discuss foreign hpc manufacturers that 
the U.S. companies considered as providing foreign av ailability and 
competition. We found few. Throu^out Europe and Asia, U.S. conqMiter 
subsidiary officials stated that their competition is primarily other U.S. 
computer sul»idiaries and, to a lesser extent, Japanese con 4 >anies. Our 
mformation does nc^ support Commerce’s position on all of these 
manufacturers. For example, our visit to government and commercial 
sources in Singapore indicated that the country does not im>w have the 
o^abilities to produce hpcs. We asked Commerce to provide data to 
support its assertion on foreign manufacturers, but we received no 
documentary support In addition, although requested, Commerce did not 
provide documentary evidence to confirm its asserted capabilities of 
India’s hpcs and uses. 

3. Commerce stated that policy makers did not receive dob informatics 
prior to the revision of the hpc controls in 1995 and, further, there is 
current disagreement within dob over the contribution that hpcs make to 
nuclear programs in countries of concern. We agree that Commerce did 
not obtain available information on this issue from doe laboratories, 
although such information was available and provided to us iq>on request. 
In addition, we found iu> dissent or qualification of views identified in 
doe’s official stady cm this matter. 

4. Commerce stated that worldwide availability of computers indicates 
that there is a large installed base of systems in the tens of thousands or 
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CoBuaeree 


even millions. Conunerce further stated that license requir^oits will not 
prevent diversion of hpcs unless realistic control levels are set that can be 
enforced effectively. While we agree, in principle, that increasing numbers 
of HPCS makes ccmtrollability more difficult, a realistic assessment of ^en 
an item is ‘imccHitroUable” would require an analysis of (1) actual data, 

(2) estimated costs of enforcing controls, and (3) pros and cons of 
^tematives — such as revised regulatory procedures— that might be 
considered to extend controls. Such an analysis was not done by the 
executive branch before its 1995 decision. In addition. Commerce 
provided no documentary evidence for its statement that there is a large 
installed base of hpcs in the millions. 

5. Commerce stated that most European governments do not enforce U.S. 
export control restrictions on reexport of U.S.-supplied HPCs. We agree 
that at least those European governments that we visited (Germany and 
United Kingdom) hold this position. However, although requested, 
Commerce provided no evidence to support its statement that the 
government of the United Kingdom has instructed its e3q>oiter8 to ignore 
U.S. reexport ccmtiols. 
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Appeadix V 

CoBUMBtt ^xmi the Depu-tment of Defenoe 


wiMy ^nAioail Mcuriiy iffUetfiaw dMt MB bcaafit fa «M faw or sMiftir ftem 
eoapowi wffa padboance fafifa wtO bfaoir eymnt faMboMi far « 9 afa ttoMfag. 
For asumpte, du P- 1 17 fleUaiy mcnil WM dMi^ad, dtv«lop«d» «d prafaioid nfat 
ooByutmwnbatowSOQmtnfeBfaaowltMlopwfafaBtpMiiPCBdi il0Bi«v«.itfa 
•qo^ faipocfafa to SMM fa» dapM itf MfaoOiibttiy oToonpalia. liifaBim 
OOByUlM ai^Ort OOfatOi fwfaw» VadMBSfatdfaBtaflBFBlHI wlfapMfa^MBM 
bfaawiiwcBiwfalkaM>fa f w ii o H farTlMmcowfafa>ai>widi|y mifaM i | i n>nn y 
awl MM mtlj iiBfatilti ill t m i lium m nnrtinl itim ntm iil Iti iM lfard-t fatet, 
ihi rrwiilaia itoriiliil in im m ■ ajifn nf iimImb it n finlrih fait rrflTrr 1—*- 


• The nftfT rannmmiiwli fail far IfTtfl rmiiilM nWitn iiMhlnMl mrllTim ttr iiftr*^ 
ciiiiimi orhijIipirftnunfMi fiBininnri naAdDdBfaMfaawinbiaaBdMttata 

nviaw of eooipBar ooosoli ad facM BifgMlkai wflt bi iOBridMdte fat SOWN if 
fattiovfaw. 


If yoB fatve «y queadOBi, pfaiM oeatMt Dr. OhMBO Naaimak w Ufa. iUebHd 
Soikfa ofmy (703) dO«40M. 
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GAD Comments 


The following are Gao’s comments on the D^>artment of Defense letter 
dated July 16, 1998. dod provided one set of written comments for this 
report We addressed dod’s general comments relevant to this report on 
page 17. We address dod’s specific commits below. 


1. DOD stated that the Stanford study was only one of many inputs 
considered by the executive branch in its 1995 assessment of computer 
export controls. We agree, and our report states, that there were other 
inputs to the decision. However, offidals at Commerce, dod. State, doe, 
and acda refened us to the Stanford study in explaining the basis for the 
executive branch decision to revise the controls. Moreover, in announcing 
the 1996 HPC expcut control changes, the executive branch hi^Uighted two 
conclusions of its review: (1) U.S.-manufoctured computer technology up 
to 7,000 MTOPS would become widely available woridwide by 1997 and 

(2) many hpc applications used in U.S. national security programs occur at 
or above 10,000 irrops. Both conclusions were based on information 
provided orily in the Stanford study. Also, dod provided briefing slides on 
the HPC export control revision to the House Conunittee on N^onal 
Security dated OcK^r 17, 1995, using information drawn almost 
exclusively from the Stanford study. Finally, a March 1998 Commerce 
Department report foreign policy export ccmtrols noted on^ one 
source — a new Stanford study — as part of a 1998 review of hpc e^>ort 
ccmtrols. 

2. dod stated that it identified numerous naticmal security applications 
used by the United States that require various levels of computing power, 
which helped to establish the revteed licensing policies. We agree, and our 
report discusses the fact that DOD identified how the U.S. govenunent uses 
HPCs for national security applications. However, this misses the pc^t 
because these applications did not refer to particular countries of cortcem. 
As we itoted in our report, the principal author of the Stanford study and 
DOD officials said that they had not performed a threat assessment or 
analysis of other countries’ use of hpcs for military and other natiorukt 
security putp(»es. The current dod analysis of how countries of concern 
can use hpcs is being done at the request of the House National Security 
Ckmunittee and might provide the informati<m needed to perform our 
recommended assessment. 

3. We disagree that the executive branch fulfilled the intent of our 
recommendations. l^>ecificaUy, it did not have information on how and at 
ediat perfcHmance levels countries of concern, such as China, India, and 
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l^ykisun, use hpcs for militaiy nK>denuzaticm and nonniud^ proMferaticm 
activities. Regarding the degree of contrdChibility of computers, neither the 
Hanford study nor any of the other inputs used in the 19^ con^ter 
es^it ccmtrol review provided any oi^iricsdi evidence cmt wal^is to 
stq^pcut a^ititms dut hfcs widt certain p^rfomuuice lev^ are widd^ 
avaiitobie and uncontitdlable. In fact, the 19^ ^tmfiord stucfy recomm^ib 
procedural expott licensing changes that would make such hpcs 
controllable again. 
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GAO RESPONSE TO THE COMMENTS OF THE STANFORD STUDY AUTHORS TO GAO REPORT 




The authors of the 1995 Stanford study state that GAO’s criticism of their study and of the administration’s 
decision to relax controls in 1996 was flawed, first, because the GAO criticism was based on unrealistic 
pr^umptions regarding market controllability and, second, because GAO presumed that a comprehensive, 
detailed analysis of how foreign organizations of national security concern may use HPC technologies is a 
strong prerequisite for relaxing export control thresholds. With regard to market controllability, the authoi^ 
of the Stanford study hypothesized that the controllability of HPC technologies today are more strongly 
determined by the quantities and qualities of systems of U,S. origin than by systems of foreign origin. 

They said that at a certain point (between 4,000 to 5,(XX) MTOPS) the volume of computer sales, including 
sales from the secondary market and scalable computers (those that can be easily upgraded by a user) make 
the costs of controlling their export too high. The authtM^s of the study also stated that the implicit mirror- 
image analysis they conducted across a broad spectrum of U.S. practices to estimate a foreign country’s 
ability to use HPCs is a viable alternative to comprehensive, in-depth analysis of foreign uses of HPCs. 


GAO COMMENTS 


With regard to the Stanford study’s hypothesis concerning market controllability, the authors' assertions 
about GAO’s criticisms do not accurately reflect what GAO reported or concluded. While we agree, in 
principle, that the study’s hypothesis may have merit, an assessment of whether an item is actually 
“uncontrollable” would require an analysis of ( 1 ) actual data. (2) estimated costs of enforcing controls, and 
(3) pros and cons of alternatives -such as revised regulatory procedureS"that might be considered to extend 
controls. It was the lack of actual data or analysis showing that resources available to the government and 
computer industry would be inadequate to track or control HPC sales that presented a problem. In this 
regard, the study’s authors told us that they did not attempt to analyze the costs of controlling HPC 
technology at or below performance levels of 4,000 to 5,000 MTOPS. Moreover, the authors provided no 
data or analysis concerning the actual size of the HPC market, the amount of alleged market “leakage,” or 
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the volume of the HPC secondary market. Also, it should be noted that, with regard to scalability, a follow- 
on 1998 Stanford study acknowledged and recommended a possible alternative for applying export controls 
to address this technological development. 

Regarding U.S. national security, GAO’s report did indicate that the executive branch should have 
conducted an analysis of how foreign countries of concern may use HPC technologies for military or 
proliferation purposes prior to relaxing export control thresholds. Since the executive branch’s stated goals 
for HPC export control revision included tailoring control levels to security and proliferation risks of 
specific destinations, it became vita] to determine how and at what performance levels specific countries 
would use HPCs for military and other national security applications and how such uses could threaten U.S. 
national security interests. Because of data and time limitations, the authors were unable to perform this 
analysis. Instead, they looked at how the U.S. military uses HPCs-referred to as mirror-image analysis. 
Although they state that a mirror-image analysis is a viable alternative to comprehensive, in-depth analysis 
of foreign uses of HPCs, the authors recommended significantly enhancing the analysis of HPC 
applications to countries of national security concern, including providing a more focused evaluation of the 
capabilities of target countries. Mirror-image analysis may provide some useful general information, but in 
this case, there is a need for more specific data to meet the goals set by the administration. DOD has since 
completed an analysis of how countries of concern could use HPCs for military and proliferation purposes, 
but this analysis was not completed until November 1998, nearly three years after the decision to relax 
HPC export controls. 
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Introduction 

On September 16, 1998, the U.S. General Accounting Office released a report, GAO/NSIAD- 
98-196, entitled Information on the Decision to Revise High Performance Computer Controls 
[1]. This report was the culmination of an approximately year-long investigation to (1) 
assess the basis for the executive branch’s revision of high performance computing (HPC) 
export controls, (2) identify changes in licensing activities and the implementation of certain 
U.S. licensing and export enforcement requirements since the revision, and (3) determine the 
current foreign availability of HPCs, particularly for certain countries of national security 
concern. A prominent part of their report was a critique of a 1995 Stanford study: Building 
on the Basics: An Examination of High-Performance Computing Export Control Policy in 
the 1990s [2]. 

This document is a reply to the GAO report. It provides a rebuttal to the two main criticisms 
leveled at the 1995 Stanford study. It further suggests that the GAO report was preordained 
to conclude that no significant relaxation of export controls should have been made because 
they started with unrealistic prenuses regarding the role of foreign availability and the 
grounds on which foreign use of HPC can effectively be assessed. 

The GAO’s criticism of a 1995 Stanford study and the Administration’s 
decision to relax export controls in 1996 is flawed. It is based on highly 
unrealistic presumptions that disregard the reality of high-performance 
computing technologies, markets, and applications in the 1990s: 

• That the 1979 concept of “foreign availability” adequately reflects the 
controllability of HPC technologies in the late 1990s. 

• That comprehensive, detailed analysis of how foreign organizations of 
national security concern may use HPC technologies is a strong 
prerequisite for any form of relaxation of export control thresholds. 


Response to Criticism of the 1995 Stanford Study 

The GAO report made two primary criticisms of the 1995 Stanford study. The following two 
sections address each of these criticisms. 
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Lack of assessment of foreign capability to use HPC for national 

SECURITY PURPOSES 
Response to critique 

The GAO report makes the following claims regarding the Stanford study’s assessment of the 
application of HPC for national security purposes [3]: 

Although the Stanford study was tasked with assessing the capabilities of 
countries of concern to use HPCs for military and other national security 
applications, it did not do so. The study discussed only U.S. applications of 
HPCs for military purposes. 

There are two implications in this statement. First, that we ignored foreign countries’ 
capabilities. Second, that mirror-image analysis - which tries to estimate a foreign country’s 
ability to use HPC systems based on a study of the kinds of problems U.S. practitioners are 
solving, and what computing support is deemed necessary - is fundamentally flawed for the 
purposes of formulating export control policy. Both implications are incorrect. 

The GAO report claims that the 1995 Stanford study failed to consider the 
ability of countries of national security concern to use HPC systems for 
national security applications. This is untrue. 

While it is true that the 1995 Stanford study did not identify in detail the current capability of 
each country of the world to apply HPC to each category of national security of application, 
it did not ignore the issue. The country/application matrix (Table 1 6, [4]) is an unclassified, 
significantly condensed version of a classified assessment produced by the Defense 
Technology Security Administration. It does indicate some of the countries that could use 
HPC productively in a number of advanced conventional weapons and operational 
applications. The eventual division of countries into four tiers reflects a number of criteria 
that include, but are not limited to, foreign countries’ abilities to apply the HPC technologies 
effectively to problems of national security concern. 

The more fundamental problem is that detailed analysis of many HPC applications that may 
be pursued in highly sensitive installations in countries of national security concern to the 
U.S. is extraordinarily difficult and expensive to do. It is rare that it can be done even in a 
few isolated cases, and even when conducted is usually significantly based on at least some 
substantial, implicit mirror image analysis. During the long history of export controls very 
little such analysis has been done. The entire U.S. intelligence community has been unable 
to pursue such analysis in a comprehensive fashion. Insisting that a great deal of such 
analysis be done as a prerequisite for any relaxation of controls in the face of such great 
technological change is unrealistic and unfair to U.S. industry. The 1995 Stanford study did 
what was possible given the constraints of a three-month study period, the information 
available from the U.S. government, and the security restrictions placed on that information 
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What we did do was conduct an implicit mirror image analysis across a broad spectrum of 
applications. This analysis was substantially elaborated in the 1998 Stanford study [5], 
which supported the essential conclusions of the 1995 study. Together, the two reports 
constitute by far the most extensive unclassified survey of possible HPC applications of 
national security concern yet done for export control purposes. 

Few would argue that such mirror image analysis gives a precise picture of how foreign 
countries may use the HPC technologies they acquire. However, the real question is whether 
mirror imaging is sufficiently accurate that it can be usefully employed by policy-makers who 
must make decisions even when time and resources are limited. 

Mirror-image analysis tries to estimate a foreign country’s ability to use HPC 
systems based on a study of the kinds of problems U.S. practitioners are 
solving, and what computing support is deemed necessary. While imperfect, 
such analysis is a viable alternative to comprehensive, in-depth analysis of 
foreign uses of HPC. It does allow policy-makers with finite time and 
resources to make decisions with some confidence that the conclusions are not 
ill founded. 

The GAO report fails to demonstrate that mirror-image analysis is sufficiently 
inaccurate that the 1995 Stanford study’s conclusions should be called into 
question. 

An asymmetry between U.S. and foreign pursuits is significant only if a) a foreign country 
pursues applications not pursued by the U.S., or b) if foreign entities are able to use lower 
levels of HPC technology far more effectively than their U.S. counterparts. Given the great 
depth and breadth of experience and support of the U.S. national security HPC community, 
the first point is unlikely. There appear to be very few specific and substantial examples of 
the second point for computing during the long history of HPC export controls. Some of the 
few examples that were of concern at certain times - Soviet parallel computing systems 
during the 1960s and Soviet residue arithmetic machines during the late 1970s - were 
essentially failures. 

The GAO report fails to demonstrate that the mirror-image approach is sufficiently inaccurate 
that the fundamental findings of the 1995 Stanford study should be called into question. The 
GAO report’s one reference to a detailed study of foreign capabilities in a nanow application 
domain, the 1998 DOE study on the benefit of HPC to tier 3 countries’ nuclear programs, 
hardly invalidates mirror-image analysis. For example, the GAO report states that [6], 

[a]ccording to the DOE study, the impact of HPC acquisition depends on the 
complexity of the weapon being developed and, even more importantly, on the 
availability of high-quality, relevant test data. The study concluded that ‘the 
acquisition and application of HPCs to nuclear weapons development would 
have the greatest potential impact on the Chinese nuclear program - 
particularly in the event of a ban on all nuclear weapons testing.’ Also, the 
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study indicated that India and Pakistan may now be able to make better use of 
HPCs in the 1 ,000 to 4,000 Mtops range for their nuclear weapons program 
because of the testing data they acquired in May 1998 from underground 
detonations of nuclear devices. 

Compare these conclusions with the conclusions of the 1995 Stanford study [7]: 

Control of HPC exports to countries known to possess nuclear weapons, by 
limiting those exports or imposing appropriate safeguards, will impede their 
development of improved weapons and reduce their confidence in their 
existing stockpile by limiting the opportunity to conduct simulations in lieu of 
live tests. Similar or more rigorous controls on HPC exports to countries with 
nuclear weapons development programs could impede their development of 
second-generation weapons. . . Live testing has been critical to the U.S. 
nuclear weapons program, and vast amoimts of data have been collected. In 
fact, the availability of data from full- and limited-scale nuclear tests is more 
crucial than the availability of HPC. Computer models were partially based 
on test data, and as more data from nuclear detonation tests was acquired they 
were refined and expanded. . . The advancement of a nuclear weapons 
program beyond basic weapons design requires both computational 
horsepower and empirical test data. . . Second-and later-generation nuclear 
weapons design requires using computers of at least 1,500 Mtops and 
conducting tests to provide data for empirical model development. [W]ithout 
nuclear test data and the resulting empirical models, computers at [4-5,000 
Mtops]-indeed, at any currently available level of performance-are likely to 
be insufficient to design such weapons. 

The DOE study is consistent with the 1995 Stanford study. Moreover, the DOE study itself 
contains substantial mirror image analysis. This is not to say that studies like that done by 
the DOE should not be carried out, when feasible. We recommended that they be done 
because of their potential contribution to our understanding of the actual state of practice of 
HPC applications throughout the world. Furthermore, when such information becomes 
available, the analytic framework developed in the Stanford studies can easily accommodate 
it. But in the absence of such studies, the mirror image analysis becomes the only viable 
general alternative and does allow policy-makers to move forward with some confidence that 
the conclusions are not ill founded. 

The GAO report quotes a Department of Energy study on the benefit of HPC 
systems to tier 3 countries’ nuclear programs to refute the analysis of the 1995 
Stanford study. However, the DOE study is consistent with the 1995 Stanford 
study. 
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Role of HPC applications in establishing control thresholds 

The ultimate objective of HPC export control policy is to limit selected foreign 
organizations’ ability to pursue certain applications of national security concern by restricting 
their access to the necessary computing hardware. However, a discussion of national security 
applications cannot be divorced from a discussion of the levels and types of computing power 
needed, and the controllability of that technology. This framework, developed in the 1995 
Stanford study and elaborated in the 1998 study, posits and tests three basic premises: 

1 . There are problems of great national security importance that require HPC for their 
solution, and these problems cannot be solved, or can only be solved in severely degraded 
forms, without such computing assets. 

2. There are countries of national security concern who have both the scientific and military 
wherewithal to pursue these or similar applications. 

3. There are features of the necessary computers that permit effective forms of control. 

The framework helps establish a range of threshold choices for which the basic premises 
hold, and at what levels, at any point in time. It can accommodate all data that is relevant to 
the discussion, e.g. technical details about computing systems, market data, computational 
requirements of national security applications, uses of HPC in foreign countries, and foreign 
HPC vendors. 

Much of the current public debate centers around applications that require 
relatively low levels of computing by today’s standards, levels that can be 
obtained more easily and without much delay with each passing year by 
foreign entities of national security concern. The debate should focus on those 
applications in which HPC export controls can make a real difference. 

Arguably, all three premises held during most of the Cold War. With changes in threats to 
U.S. national security interests and in HPC technologies, markets, and applications, the 
premises no longer hold at Cold War control thresholds. However, much of the current 
public debate centers around applications that require relatively low levels of computing by 
today’s standards, levels which can be obtained more easily and without much delay with 
each passing year by foreign entities of national security concern. In particular, much of the 
debate that has raged around HPC export control policy has centered on the proliferation of 
nuclear, chemical, and biological weapons of mass destruction (WMD). While there is 
obviously good reason to be concerned about such applications, there continues to be a 
misperception that HPC is a major enabler of these threats. This yields an exaggerated view 
both of the importance of computing for WMD proliferation, and of our ability to deny 
widely available levels to undesirable end users. For example, the designs of the nuclear 
weapons in the current U.S. and Russian stockpiles are based on extensive nuclear test data. 
The designers used the test data in conjunction with computers no more powerful than a 
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single-processor Cray X-MP or Y-MP,' each of which has an Mtops rating less than today’s 
Apple iMac consumer desktop machine. Among scientists at the Department of Energy and 
its weapons labs, there is widespread agreement that when test data are available, computing 
above this level is no longer on the critical path in designing nuclear weapons. When test data 
are not available to validate the applications, the use of even controllable HPC is of limited 
benefit.^ In countering the proliferation of WMD, our energies should be focused on other, 
more effective measures than trying to control the export of readily available hardware 
platforms. 

Nuclear weapons in the current U.S. stockpile were designed with computers 
no more powerful than a single-processor Cray X-MP or Y-MP, each of which 
has composite theoretical performance (CTP) less than today's Apple iMac 
consumer desktop system. 

When test data are available, high levels of computing power by today's 
standards are not needed for nuclear weapons design. When test data are not 
available to validate ^plications, even a great deal of computing power is of 
limited benefit. 

If not nuclear weapons design, what applications can serve to justify the policy? Although 
important and computationally demanding applications exist, it has been difficult to find 
constituencies willing to fight for them in the export control debate. We spent a great deal of 
effort during both the 1995 and 1998 studies to find HPC practitioners in the U.S. national 
security community who could provide a detailed assessment of the following question. With 
regard to their applications, how -would HPC export controls seriously handicap foreign 
organizations in pursuing the applicatiort, given technological progress in the areas of 
microprocessors, scalability and clustering? The assessments had to go beyond descriptions 
of how computers are generally useful and describe what significant result can be achieved 
with, say, a 6,000 Mtops computer that cannot be achieved with a half-dozen easily clustered 
1,500 Mtops systems. We were surprised at how difficult it was to find individuals within 
the Departments of Defense or Energy vdio believed in and were willing and able to argue in 
detail for a continuation of export controls at workstation or modest multiprocessor levels to 
protect applications within their spheres of activity. 

One of the contributions of the Stanford studies, unacknowledged by the GAO report, was to 
bring into the discussion applications of national security importance that can serve to justify 


' While the national laboratories did use systems like an eight-processor Cray Y-MP/8 with CTP approaching 
4,000 Mtops, individual weapons design codes ran on only one 500 Mtops processor at a time. 

^ DoE’s Advanced Scientific Computing Initiative (ASCI) is applying computer simulation to the problems of 
stockpile management, not weapons design. A non-testing environment requires large-scale simulations that ate 
necessary in the absence of new test data. 
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the policy. These applications, demanding levels or forms of computing power that can only 
be provided by systems that are controllable, fall into two broad categories: research and 
development (R&D) applications and operational applications. R&D examples include 
large-scale forces modeling, effects of weapons on structures, radar cross-section 
calculations, and shallow water submarine maneuvers. While many R&D activities can use 
less powerful systems running for longer periods of time to obtain a desired result, there is a 
substantial time advantage to using the more powerful systems. This time advantage 
contributes substantially to the technological lead the U.S. and its allies enjoy. Restricting the 
export of such high-end HPC systems can thus delay entities of national security concern in 
their pursuit of these same applications, enabling the U.S. to maintain its lead. 

There do exist applications of national security concern that require levels and 
forms of computing power that carmot be provided by readily available 
technologies. The 1996 export control revisions were strongly influenced by 
the requirements of such applications. 

Unlike the situation with R&D examples, operational applications have time constraints that 
must be met. Important examples of operational applications are on-board signal processing 
and military-grade weather forecasting. Weather forecasters, for example, must have a result 
within a very strict time window, e.g. an hour for the computation of a single global forecast. 
The difference between a single 6,000 Mtops computer and a loosely coupled cluster of 1,500 
Mtops computers is much greater for such applications than for any other research and 
development or operational application that we or anyone else has been able to identify. The 
1996 policy was strongly influenced by the computational requirements of such applications. 


Lack of empirical evidence or analysis supporting assessment of 

CONTROLLABILITY 

The second chief criticism by the GAO of the 1995 Stanford study is that “[T]he study lacked 
evidence or analysis to support its conclusion that HPCs were uncontrollable based on (1) 
world-vnde availability and (2) insufficient resources to control them.” [8] 

The GAO report’s conclusion is based on a very strict interpretation of “foreign availability” 
as defined by the Export Administration Act (EAA) of 1979, as amended.’ The GAO report 
correctly noted that only about half a dozen companies outside the United States, located in 
Japan and Western Europe, compete with U.S. HPC vendors in general computer technology 
markets and that these non-U.S. vendors have almost no sales to tier 3 countries. The GAO 
report also correctly notes that tier 3 countries have limited ability to produce HPC systems 
that are comparable in quantity, quality, and power to those produced by major HPC-supplier 


’ The EAA describes foreign availability as goods or technology available without restriction to controlled 
destinations from sources outside the United States in sufficient quantities and comparable quality to those 
produced in the United States so as to render the controls ineffective in achieving their purposes. 
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countries. The 199S Stanford study explicitly covered this point in some detail for Russia, 
China, and India. 

The GAO ignored the point that technologies associated with HPC have changed 
dramatically since 1 979. If a lack of foreign availability under the old EAA definition is 
sufficient to establish a technology’s controllability, then it should be true that any 
technology available only from U.S. vendors (or their licensees) is controllable. Consider, 
however, microprocessors and the single-processor desktop and desk-side systems based on 
them. The international market for advanced general-purpose microprocessors is completely 
dominated by U.S. companies such as Intel, Cyrix, AMD, Compaq/DEC, IBM, Motorola, 
Hewlett-Packard, MIPS, Sun Microsystems, Texas Instruments and their foreign licensees 
(e.g. Samsung, NEC, Toshiba, Fujitsu). Hundreds of thousands of microprocessors with 
individual performance above 500 Mtops are manufactured each year, as are tens of millions 
of processors with performance between 300-500 Mtops. As one small example, in a six- 
week period fiom mid-August to the end of September 1 998, Apple Computer sold 278,000 
iMacs (233 MHz G3 processor, 524 Mtops) [9]. 

Advanced microprocessors lack foreign availability, yet are completely 
uncontrollable. They prove that the 1970s concept of “foreign availability” is 
inadequate for determining controllability in the 1990s. 

Throughout the tier 3 countries, there is a modest number, 200-300 at most, of organizations 
such as foreign military research and development installations that have the motivation, 
technical ability, and funding to use HPC technologies to the serious detriment of U.S. 
national security interests. Do opponents of the current export control regime believe that 
advanced microprocessors are controllable, and that control efforts by the U.S. government 
could prevent these few installations fiom obtaining small numbers of them? If so, such 
beliefs are exceedingly unrealistic. Do they intend to license all of the hundreds of thousands 
of machines using these microprocessors and track them throughout their useful life, and 
provide funding for this licensing and tracking effort? If not, they must agree that factors 
other than the 1979 definition of foreign availability must be taken into account to establish 
effective international controllability. These factors include the installed base, size, cost, age, 
distribution channels, and dependence on vendor support. An additional factor, scalability, is 
significant for reasons discussed below. 

Foreign availability, when it exists, is certainly a strong form of worldwide availability. But 
as the discussion above indicates, it is not the only factor influencing controllability, and may 
not even be the dominant factor. We determined that the foreign availability of HPC 
technologies fiom countries such as Russia, China, and India was not an important factor 
outside their own countries, even if their likely exaggerated claims of computing capabilities 
were true. But even when indigenous HPC vendors may not be “competitive” on the world 
HPC market, they can be effective in helping a tier 3 or 4 country achieve competence in an 
area of national security concern to the United States. An example of this is the role of 
indigenous computing in the Indian nuclear program. Unlike the GAO, we also determined 
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that the actual nature of worldwide availability of HPC is much more strongly shaped by the 
qualities of HPC systems of U.S. origin and their markets. 

The controllability of HPC technologies today is mote strongly determined by 
the quantities and qualities of systems of U.S. origin and their markets than by 
systems of foreign origin. Some U.S. HPC systems may be quite difficult to 
control even though no comparable foreign systems exist 

While it is clear that systems at 500 Mtops are uncontrollable, the question remains whether 
there are more powerful systems that are also uncontrollable? The values of the parameters 
affecting controllability can be, and were, empirically established. The size, cost, age and 
performance of systems are easily determined from vendor literature. We obtained data on 
the size of vendors’ installed bases. While exact figures for units installed were not 
available, the data we obtained were sufficiently acctuate to draw our conclusions. Some of 
this information was vendor proprietary and did not appear explicitly in the 1 995 Stanford 
study; however, the data was a factor in the conclusions. The 1998 Stanford study, completed 
in May, updated, extended, and validated the work started in the 1995 study. 

To get a sense of the controllability of more powerful systems, it is instructive to compare an 
important class of 1990s HPC systems with their 1980s counterpart: today’s single-rack and 
desk-side multiprocessors with VAX minicomputers from Digital Equipment Corporation. 
Between the late 1970s and early 1990s, thousands of units of the VAX 1 1/780 and its 
successors were installed. VAXes were more controllable than the single-rack 
multiprocessors of 1995-96 and substantially more controllable than desk-side 
multiprocessors. They were physically larger and less scalable, were manufactured by a 
single U.S. company, used software unavailable from other vendors, had smaller foreign 
markets than today's systems, and were more difficult to install and maintain. The U. S. 
singled out VAXes for control at a time when COCC^ offered a much stronger multilateral 
regime for controlling computing exports than exists today. Yet, Soviet and East German 
facilities with national security priority were able to get one or more VAXes and run them 
without too much difficulty. It is likely that himdreds were obtained illegally, a few well- 
publicized intercepts notwithstanding.^ Even Syria, not a computing powerhouse by any 
measure, was able to acquire illegally and productively use VAX computers. By 1995-96, 
U.S. vendors had installed thousands of single-rack multiprocessors and tens of thousands of 
desk-side multiprocessors. The precise point at which technologies become “uncontrollable” 
is a subject for legitimate discussion. However, it is clear that controls trying to regulate the 
export of today’s single-rack and desk-side multiprocessors would be less effective than 


' During the final years of the USSR and GDR, some of the authors of the 1995 Stanford study observed first- 
hand illegally acquired VAXes. The U.S. Government was unaware of and unable to track most of the illegal 
VAX acquisitions found. Efforts to control IBM 2S6 PC clones during die late 1980s were even less 
successful. 
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those in place during the heyday of the VAX. TTie nature of the technology makes the task 
more challenging and the international mechanisms are weaker. 

In spite of strict COCOM export controls, Soviet, East German, and even 
Syrian organizations illegally acquired and productively used VAX 
minicomputers during the 1980s and early 1990s. Today’s single-rack and 
deskside multiprocessor HPC systems are less controllable than VAXes and 
more available to such organizations. 

The GAO report was critical of the fact that the 1995 Stanford study 

suggested orrly vague thresholds for [the] six factors to determine 
“uncontrollability.” For example, it noted that the threshold at which it 
becomes difficult to track numbers of units could vary from 200 to several 
thousand [10]. 

The criticism is ill-founded for two reasons. First, while extreme examples of “controllable” 
and “uncontrollable” technologies are easy to identify, many of the technologies at the center 
of the current dispute - e.g. multiprocessor workstations and servers - lie between the two 
extremes. Since controllability is partly a function of the amount of effort expended on 
control, it is more accurate to speak of such technologies as being “more controllable” and 
“less controllable” rather than “controllable” and “uncontrollable.” Second, the GAO report 
fails to point out that our report tended to be conservative in its judgments. While views 
regarding the threshold at which it becomes difficult to track individual units did vary from 
200 to several thousand, we chose to use the conservative end of this range. The 1995 
Stanford study did not conclude that 200 machines were difficult to track. Instead, it argued 
that several thousands were. Furthermore, to ensure that the systems on which we based our 
conclusions did in fact have cumulative installed bases in the thousands or more, we did not 
consider them until they had been in production for two years. It is at this point (or sooner 
for desk-side and smaller systems) that systems become available in primary markets in 
volumes that are difficult to track, and begin to appear on the secondary markets. Secondary 
market channels are often outside the control of vendors and subsidiaries who are generally 
compliant with export regulations.’ The GAO report claims that we “asserted that as U.S. 
HPCs were sold openly for two years, their export would become uncontrollable” [10]. The 


^ A review of vendors of refurbished systems in early 1 998 supported the prediction that by the end of 1 997 or 
early 1998 systems with a flilNconfiguration performance alwve 7000 Mtops would be available on the 
secondary markets. These systems included refurbished DEC AlphaServer 8400 5/300 (7,639 Mtops, 
introduced in 1995) and Sun Ultra Enterprise 4000/250, a high-end desk-side system (7,062 Mtops, introduced 
in early 1997). Vendors of refurbished systems will configure and test the system before shipping. However, 
they usually perform no on-site services, except on special request and at additional cost. In short, there are few 
efforts to control where the technology goes. Year-old desk-side systems are also widely available on the 
secondary market. For example, the AlphaServer 4 100 5/466 (4,033 Mtops, introduced in early 1997) is 
available from brokers not only in the United States, but also in the Netherlands, Austria, and other countries. 
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implications are that we applied this statement to all HPC systems and claimed it as a 
sufficient factor. Both implications are incorrect. For example, Cray vector pipeline systems 
that are ten years old continue to be controllable because of their small installed base and 
extensive need for on-going vendor support. We applied the two-year lag only to those 
systems that had other features that made control difficult, e.g. the single-rack symmetrical 
multiprocessor (SMP) systems. 

As the 1995 Stanford study predicted, HPC systems scalable to over 7,000 
Mtops became available in 1997 on refurbished equipment markets, outside 
the control of the original vendors. 

What is the performance of these single-rack and desk-side systems? The answer is critical 
because it shapes the performance thresholds at which policy makers may draw viable control 
thresholds. In 1995, the performance of desk-side multiprocessor systems whose installed 
base was in the tens of thousands ranged up to approximately 1500 Mtops; by 1 996 the 
performance was approximately 2500 Mtops. During these years, the performance of single- 
rack systems with installed bases in the thousands ranged up to just over 4000 Mtops in 1995 
and nearly 5000 Mtops in 1996. To understand these figures, one must understand 
scalability, one of the most important developments in the design of HPC systems in the 
1990s. The desk-side multiprocessors and single-rack servers were designed so that users 
could purchase a small configuration consisting of a few processors, and incrementally add 
CPUs, memory, and input/output capability as their computing needs increased. In most 
cases, adding boards is an operation that is not difficult and can be performed by competent 
users in the field. In 1996, were there tens of thousands of fully configured 2500 Mtops 
desk-side systems and thousands of 4500 Mtops single-rack servers sold? No. Most units 
were installed with a quarter or a half of the maximum permitted processors. Could an end- 
user acquire a modest performance configuration legally and then upgrade it to these 
performance levels by himself or with minimal assistance? Yes. The technology is designed 
to accommodate such upgrading. Were there large numbers of installations that could be 
upgraded to these levels? Yes. Do the small number of high priority, well-heeled, 
technically competent installations that are the main targets of HPC export controls have the 
capability to do these upgrades, or to get someone to do them? Very likely. 

By 1995/1996, tens of thousands of deskside systems that could be scaled to 

2.000 Mtops by end users had been installed worldwide. At the same time, 
thousands of single-rack multiprocessors scalable by end users to between 

4.000 and 5,000 Mtops had been shipped. 

By 1997/1998, deskside systems with comparably large markets had reached 

4,000 Mtops; single-rack multiprocessors, over 7,000 Mtops. 

Such levels of computing could be obtained by the relatively small number of 
well-heeled, technically competent foreign organizations that are a threat to 
U.S. national security interests. 
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The goal of our analysis of HPC technologies and markets was to try to identify performance 
points at which the government might decide to impose controls. What we found was the 
following: By late 1995, there were tens of thousands of systems that were easily scalable to 
around 2,000 Mtops. At the same time, there were thousands of units that easily scaled to 
between 4,000 and 5,000 Mtops. Within the band from roughly 2,000 to 4,500 Mtops a 
control threshold would be unstable, in the following sense. The CTP metric is imprecise 
enough that platforms whose CTP ratings differ by 50% or more may yield comparable 
performance on a given application. Because of the density of vendor offerings in the 2,000 
to 4,500 Mtops range, any threshold drawn within this band risks making some companies 
with products just below the threshold wirmers, and companies with products just above the 
threshold losers for no clearly justifiable national security reason. Moreover, for any possible 
threshold within this band a system below the threshold can easily be upgraded to a 
performance above the threshold. 

In short, there were only two clear choices: below the 2,000 Mtops threshold, or above the 
4,500 Mtops level. Applications of national security importance that fall in-between the two 
thresholds (discussed above) and the level of effort required to control systems below 2,000 
Mtops were the basis for choosing between the two thresholds. 

In 1995-1996, systems scalable to 2,000 Mtops cost from a few tens to a few hundred 
thousand dollars, a sum easily within the budgets of most of the 200 to 300 well-heeled tier 3 
organizations of primary concern. COCOM failed to prevent such organizations from 
obtaining VAXes. Effectively enforcing a threshold below 2,000 Mtops in 1995-1996 would 
have required a multilateral control mechanism far more extensive and costly than COCOM. 
It is difficult to imagine this being possible given the budgetary constraints and the clear lack 
of international interest among the scores of countries that would have to participate. 

In 1995/1996, effective controls over systems below 2,000 Mtops would have 

required a multilateral control mechanism far more extensive and costly than 

COCOM. 

We have briefly outlined the analysis underlying the conclusions of the 1995 Stanford Study. 
Data regarding the nature of the HPC technologies and markets was empirical. While the 
study did not try to assign dollar values to the cost of control at various thresholds, the 
comparison with the costs and challenges faced by COCOM in trying to control a smaller 
number of more controllable systems provides a strong point of reference. To say that the 
1995 Stanford study lacked evidence or analysis to support its conclusions is incorrect. 


Conclusion 

In conclusion, the GAO report is ill-founded in its two major criticisms of the 1995 Stanford 
study: that it did not assess the capabilities of countries of concern to use HPCs for military 
and other national security applications, and that it lacked empirical evidence or analysis to 
support its conclusion that HPCs were uncontrollable. The GAO came to these conclusions 
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because of two fundamentally unrealistic presumptions. First, it in essence assumed that the 
1979 definition of foreign availability is the only criterion that can capture the true 
availability of HPC technology throughout the world. Second, it applied an impossible 
criterion for assessing what countries of national security concern might do with HPC 
technologies. Given these two flaws, which disregard the reality of today’s technologies, 
markets, and applications, the GAO study was preordained to imply that no significant 
relaxation of export controls should have been made. 

The GAO report was preordained to imply that no significant relaxation of 
export controls should have been made because it was based on fundamentally 
umealistlc presumptions that disregard the reality of today’s HPC 
technologies, markets, and applications. 

While the 1 995 Stanford study may have had shortcomings due to the lack of availability of 
ideal intelligence information, they are not those highlighted by the GAO. In fact, the 1995 
study laid the groundwork for several advances in handling HPC export controls. First, as a 
result of the study, there now exists a unifying framework reflecting the salient technical 
issues and viewpoints that can guide policy-makers toward selection of control thresholds. 

Second, policy makers have committed to revisiting the policy regularly, a key 
recommendation of the 1 995 study. Previously, revision came only at widely spaced, 
irregular intervals. Consequently, stakeholders were forced to speculate on trends far into the 
future and to take strident positions. The time between revisions is still too long, especially 
compared to the rate of technological advance. However, extreme positions are less likely 
when industry and regulatory stakeholders are confident that regular reviews will take place. 

Third, while not proposed in the 1995 Stanford study, the tiered arrangement of countries 
allows allies of the United States, and other countries that pose no national security concern 
to the United States to have little to no regulation of their ability to acquire U.S. HPC 
hardware. This, combined with reports from HPC vendors to the Department of Commerce 
on sales of systems above 2,000 Mtops, has made it possible to objectively estimate the cost 
to U.S. industry of various proposed control thresholds. By far the largest foreign HPC 
markets are in countries of little threat to U.S. national security. In 1996 and 1997, the 
number of systems between 2,000 and 7,000 Mtops exported to Tier 1 countries was over 1 0 
times the number exported to Tier 3 destinations. Above 7,000 Mtops, licensing restrictions 
limited the number of Tier 3 exports to just 0.5% of the number exported to Tier 1 countries. 
By permitting exports to Tier 1 countries to take place under general license, policy makers 
have done little to compromise U.S. national security interests, while preserving the 
competitiveness of U.S. computer companies in their most significant markets. 

Taken together, these three developments have caused the level of agreement among the 
major stakeholders to expand considerably. This point was completely overlooked in the 
GAO report. 
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GAO COMMENTS ON THE RESPONSE OF THE DEPARTMENT OF DEFENSE TO GAO REPORT 
TITLED EXPORT CONTROLS: INFORMATION ON THE DECISION TO REVISE HIGH 
PERFORMANCE COMPUTER CONTROLS (GAO/NSiAD-98-196) 

The Department of Defense (DOD) stated that the national security threat and proliferation impact of U.S. 
exports of High Performance Computers (HPCs) to countries of concern were taken into account during the 
interagency review of computer export controls. DOD said that in developing licensing policies for the 
four “tiers” of country destinations, the identification of actual security applications with the various levels 
of computing power required for them formed its analysis. This also helped DOD to determine the 
appropriate level of control and scope of safeguards required for these country destinations. 

GAO COMMENT 

Despite DOD’s comment, GAO found that DOD did not conduct a country-by-country analysis of how 
countries of concern might use HPCs at any particular performance level for military or proliferation 
purposes. GAO requested documentation to show how such an analysis might have been conducted, but 
none was provided. The principal author of the 1995 Stanford Study of HPC controllability and officials in 
DOD’s Defense Technology Security Administration (DTSA) and Defense Intelligence Agency (DIA) 
stated that they had not performed a threat assessment or analysis of other countries' use of HPCs for 
military and other national security purposes. 

DTSA officials stated that they had reviewed IX)D*s own HPC applications, conducting a mirror-image 
analysis of how DOD uses HPCs above the 2,000 MTOPS level, but this review docs not constitute an 
assessment of how countries of concern might use HPCs and what military advantages such countries could 
achieve. GAO asked the DTSA officials whether they or anyone in the executive branch had made a threat 
assessment or assessed the impact on national security of allowing more HPCs to go to particular countries 
of concern. DOD officials stated that such an analysis had not been performed. As GAO’s report noted, 
the former Deputy Assistant Secretary of Defense for CcHintcrproliferalion Policy, who at the time was 
responsible in DOD for this matter, confirmed that such an analysis had not been performed. 

DOD has since completed an analysis for the House National Security Committee of how countries of 
concern could use HPCs; however, this analysis was not completed until November 1998, neviy 3 years 
after the decision to relax HPC export controls was made. This classified DOD analysis discussed bow 
countries of concern might use HPCs for military or proliferation purposes. 
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THE SECRETARY OF DEFENSE 

WASHINGTON. O.C. 20301 


Honorable Carl Levin 
Ranking Member 

Subcommittee on International Security, 

Proliferation and Federal Services 
Committee on Governmental Affairs 
United States Senate 
Washington, D.C. 20510-6250 

Dear Carl: 

Thank you for your letter addressing GAO’s report entitled “Export 
Controls: Information on the Decision to Revise High Performance Computer 
Controls” (GAO/NSIAD-98- 196/OSD Case 1648). 

Let me assure you that the national security threat and proliferation impact 
of U.S. exports of High Performance Computers (HPCs) to countries of concern 
were indeed taken into account during the 1995 interagency review of computer 
export controls. In developing licensing policies for the four “tiers” of country 
destinations, the identification of actual security applications with the various 
levels of computing power required for them formed our analysis. This helped us 
determine the appropnate level of control and scope of safeguards required for 
these country destinations. With respect to the foreign availability of HPCs, our 
interagency effort in 1995 found that computers below 7000 MTOPS for Tier III 
countries were becoming widely available. In addition, the study reviewed various 
technological advances in the computer industry. The GAO Report discusses 
“scalability,” which refers to the capability to increase computer performance 
levels of a system by adding processing boards or by acquiring increasingly 
powerful microprocessors. The interagency effort determined that computers 
below the current Tier III threshold, as defined in 1995, are easily scalable, so that 
attempts to control them would be ineffective. 

Regarding your additional points, DoD does believe that the current export 
controls for HPCs are adequately protective of our national security. DoD, in 
cooperation with other relevant agencies, performs periodic reviews of HPC export 
controls, during which security threat assessments have been and will continue to 
be a central focus. 
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Sincerely, 
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PREPARED STATEMENT OF MR. REINSCH 

Mr. Chairman, thank you for the opportunity to testify before the Subcommittee 
on export poiicy for high performance computers. The debate over computer export 
poiicy has been marked by a good deai of smoke and heat, but perhaps not as much 
iight as one couid wish, i wiii try today to expiain on the Administration's poiicy. 
its fundamentai premises are that iike it or not, rapid technoiogicai progress has 
rendered controi of high performance computers increasingiy difficuit, and that it 
is more important to our nationai security to have a heaithy computer industry sup- 
piying state of the art products to our miiitary and inteiiigence services than it is 
to attempt to controi the uncontroiiabie and jeopardize our companies' futures in the 
process. 

Four factors have shaped our thinking. The first is technoiogicai change, improve- 
ments in microprocessor design have aiiowed high performance computers to become 
ever smaiier, cheaper and faster. At the same time, improvements in micro- 
processors have made routine desk top computers capabie of performing at were 
considered supercomputer ieveis a few years ago. The second factor is giobai diffu- 
sion. We must assess reaiisticaiiy our abiiity to controi the distribution of computers 
when they are produced in the thousands or even tens of thousands and soid from 
a variety of sources around the worid. Third is the growth of paraiiei processing , 
which greatiy increases computer performance, and the concomitant abiiity of users 
to easiiy upgrade performance. Finaiiy, there is our conciusion, based on research 
and the 1995 and 1998 studies, that computer power is a secondary consideration 
for many appiications of nationai security concern. These factors— rapid techno- 
iogicai change, iimited controiiabiiity, scaiabiiity and iimited nationai security appii- 
cation— have shaped our efforts to keep our poiicy in tune with today's technoiogy 
and internationai security environment. 

in doing so we have kept in mind the nature of the computer market, which is 
a vitai eiement of U.S. economic strength. We are worid ieaders in the very competi- 
tive computer market with $2 biiiion a year in revenue, and this ieadership heips 
us across the board in the information technoiogy sector. The poiicy adopted by the 
United States in 1995 affected more than ten biiiion doiiars in exports, which sup- 
ported 140,000 jobs annuaiiy. if misappiied, export controis can profoundiy damage 
this important sector, put these jobs at risk and seriousiy damage our nationai secu- 
rity by crippiing our companies just as our nationai security estabiishment's reiiance 
on them grows. 

The competitive and increasingiy giobai market has strong impiications for export 
controis. Roughiy haif of the computers made in the United States are exported, and 
thesaiesfaii in the ranges beiow: 

• Computers capabie of up to 400 MTOPS have been soid in the miiiions. 

• Computers capabie of 400 to 1,000 MTOPS have been soid in the tens of thou- 
sands. 

• Thousands of computers capabie of 1,000 to 5,000 MTOPS range have been soid. 

• A few thousand computers capabie of 5,000 to 10,000 MTOPS have been soid. 

• Some hundreds of machines capabie of more than 10,000 MTOPS have been 
soid. 

Some of these computers can be reconfigured by their users to have much higher 
performance, and in the future, in response to market demands, more and more 
computers wiii be scaiabie. Our fundamentai reaiity is that computers which are 
avaiiabie in the thousands in markets around the worid cannot be effectiveiy con- 
troiied, even if they are buiit in the United States or based on U.S. technoiogy. The 
1995 study predicted many of these deveiopments, and everything we have iearned 
si nee then confi rms them. 

Let me turn now to the issue of technoiogicai change. Technoiogicai change means 
that computer performance is constantiy improving, creating unavoidabie pressure 
on export controis. in few other areas has the pace of technoiogicai change been so 
rapid and so dramatic as computers. Five years ago, the U.S. controiied as a super- 
computer machines with a performance of 195 MTOPS. Today's average desktop PC 
is more powerfui, and the software which can be run on it more sophisticated. 

The engine of change is the microprocessor. Computer chips are produced in the 
miiiions in piants in the United States and overseas. You are aii famiiiar with 
Moore's Law, which states that the performance of chips doubies every eighteen 
months. These performance increases are the resuit of both improved design and im- 
proved manufacturing techniques. As of August 1998, chips capabie of roughiy 500 
MTOPS are being produced in the miiiions and chips capabie of 1,800 MTOPS are 
being produced in the tens of thousands. Aithough the United States is the most 
advanced producer, piants around the worid can make these chips. Within tweive 
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months, if industry projections are correct, we can expect to see chips capabie of 
2,000 MTOPS enter into mass production. When this occurs, we wiii see saies of 
2,000 MTOPS computers numbered in the thousands, making the iimitations on our 
abiiity to maintain effective controls even more obvious than they are now. 

Other technological changes have made it easier to upgrade performance. These 
include the increased sophistication of software, the increased availability of inter- 
connect technologies which offers substantial improvements in performance and 
which may allow numbers of low level workstations to be clustered together to give 
high performance. The spread of parallel processing, which allows many micro- 
processors to work simultaneously on the same problem, has also reduced the con- 
trollability of high performance computers. 

Rapid advances in microprocessors, software, interconnects and parallel proc- 
essing mean that the performance levels once associated with giant machines can 
now be obtained by smaller and relatively inexpensive computers. The implications 
of technological progress go beyond performance. High performance computers are 
smaller, cheaper, simpler to install and maintain and more reliable. These at- 
tributes are desirable in the marketplace, but they degrade our ability to control. 

Another element of technological change could be called attainable performance 
or scalability. Manufacturers have sought to build platforms which can be easily up- 
graded through the addition of new boards. This allows users to buy computers at 
one performance threshold and then increase the performance later through up- 
grades. Some computers are designed to allow these upgrades to be performed with- 
out even turning off the machine and with system software that automatically ad- 
justs to the higher performance levels. The result is that it is possible to buy a num- 
ber of systems that perform well below 2,000 or even 1,000 MTOPS, and thus do 
not require a license for export, and then upgrade these machines to 5,000 or 6,000 
MTOPS or more. 

These technical de/elcpments pcse real problems for controllability. Faster chips 
available in the millions; smaller, cheaper and more reliable computers with per- 
formance up to 7,000 MTOPS and computers which can be exported without a li- 
cense and then upgraded to HPC performance, all have created serious limitations 
on our ability to control computer exports. 

Foreign availability— the availability of high performance computers built by for- 
eign manufacturers with foreign parts and technology— was a key determinant of 
our export policy during the Cold War. It now makes little sense and is of secondary 
importance in determining policy. We cannot realistically control the many thou- 
sands of U.S.-made computers sold freely in Europe, Asia and elsewhere. Many 
countries we sell to do not have re-export controls— in fact the New York Times re- 
cently quoted an official from a close European ally as saying that they advise their 
exporters to ignore U.S. re-export controls. We know there is a flourishing market 
in secondhand high performance computers overseas— some can be ordered directly 
over the Internet. As a result, even though the United States today dominates the 
market for high performance computers, there is a performance threshold below 
which we cannot realistically expect to maintain control of computers unless we re- 
strict sales to even our closest allies. 

That is why we have focussed on controllability— whether licensing can be effec- 
tive in restricting access to high performance computers. The studies in 1995 and 
this year suggest that HPCs are becoming less and less controllable because th^ are 
becoming smaller, cheaper, more powerful, and more reliable requiring less vendor 
support. The availability of fast, well-designed microprocessors has allowed manu- 
facturers to build more and better computers. Machines capable of 4,000 to 5,000 
MTOPS are small and easily transported. Computers well above 2,000 MTOPS are 
freely available on the global second hand market. We cannot realistically expect to 
keep the organizations responsible for weapons development in states of concern, or- 
ganizations that are technically sophisticated, well funded and which enjoy strong 
government support, from clandestinely obtaining computers with a performance 
much below 10,000 MTOPS. 

Computers are not a choke point for military production. High performance com- 
puters have attained a symbolic importance in our export control debates which 
their real utility may not warrant. The fundamental premise of critics of our policy 
is that high performance computers are essential for making advanced weaponry. 
This critique is wrong. The weapon systems found in the U.S. arsenal today— the 
tanks, airplanes, missiles and ships— were built with computers whose performance 
was below 1,000 MTOPS. These were the supercomputers of the 1980's, but today 
you can find more capable machines on many office desktops. 

We have found that the amount of computing power needed to design and manu- 
facture modern weapons, once you get over a few hundred MTOPS, is not signifi- 
cant. For example, the level of computational power used to develop all the bombs 
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in the current U.S. nuclear arsenal is less than that found today in many 
workstations. Other factors— skill in software design, access to sophisticated manu- 
facturing techniques, experience in building weapons and good test data— are much 
more important than a high performance computer. 

There are a number of applications— precise weather forecasting, computational 
fluid dynamics, and particle dynamics in particular— where high levels of computing 
power are significant, and our policy attempts to identify those and, where possible, 
protect them. This differs from those who have argued that high performance com- 
puters will give countries like China the ability to leap forward in military produc- 
tion. While HPCs no doubt provide some incremental benefit, as would a wide range 
of items, we do not believe they constitute a choke point in weapons development, 
and, as stated previously, even if they did, there are serious limitations on our abil- 
ity to control them at all but the highest levels. There is no evidence that you need 
a high performance computer to make most modern weapons, including nuclear 
weapons, or that having access to high performance computers alone will give you 
improved military-industrial capabilities. 

In fact, none of the nonproliferation regimes, the Missile Technology Control Re- 
gime, the Nuclear Suppliers Group, or the Australia Group consider computers im- 
portant enough to control. The members of these regimes decided that computers 
are not essential for production of these weapons systems. The only regime which 
controls computers is the Wassenaar Arrangement, which inherited the old eco- 
nomic warfare controls aimed at the Soviet Union. These controls did not, in the 
end, work very well in preventing the Soviet bloc from getting its hands on widely 
available computers. They were helpful in keeping big machines that require exten- 
sive support out of enemy hands but failed to stop computers available in the thou- 
sands sold freely at relatively low prices around the globe without significant vendor 
support. We would do well to remember this lesson because what we are experi- 
encing now is essentially an acceleration in the rate that ever-higher performing 
computers are becoming widely available. In other words, we can still control the 
high end, but whereas that used to be measured in hundreds of MTOPS; now it is 
measured in ten thousands. 

The United States currently dominates the high performance computer market, 
in part because of the realistic computer export policy we adopted in 1995. Tighter 
controls would penalize U.S. firms for winning the high performance computer com- 
petition. Our firms' strength has driven most producers from all but the low end 
of the market and discouraged others from entering. Export controls, like any gov- 
ernment intervention, can, however, reverse that situation. Controls at too low a 
level act as a subsidy for our foreign competitors, damage our national security, and 
cost the American economy exports and jobs. 

Maintaining our status as world leader in information technology and computer 
manufacturing is critical to both our economic growth and our national security. Ex- 
ports account for roughly half the revenues of U.S. computer companies. Ill-advised 
export controls would put this vital sector at risk and at the same time compromise 
our security by making it harder for the Pentagon to obtain the cutting edge tech- 
nology it needs. Events since 1995 have confirmed we are on the right course, and 
I hope the Congress will support the administration as it moves into a new review 
of control parameters. 
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The Great Technology Giveaway? 

Trading with Potential Foes 
Michael Hirsh 


For all its nuclear peril, the Cold War 
was in some ways a reassuring time. The 
enemy was clear, and so were America’s 
choices, or at least it often seemed. So 
perhaps Congress can be forgiven for 
reverting to its Cold War reflexes when 
confronted with a sudden series of 
proliferation issues last spring. On May 
u, India exploded several nuclear devices, 
becoming the first nation in three decades 
to declare itself a new member of the 
nuclear club. A few days later came the 
shocking allegation that two U.S. satellite 
companies, Loral Space & Communica- 
tions and Hu^es Electronics, had violated 
U.S. export testrieflons by helping Beijing 
to improve its missile guidance systems — 
and, presumably, the aim of a handful of 
Chinese intercontinental ballistic missiles 
targeted at U.S. cities. Then on May 28, 
Pakistan set offits own nuclear tests, an 
event uncoimected to the China contro- 
versy but one that seemed, nonetheless, 
to be insidiously liitked. Pakistani Prime 
Minister Nawaz Sharif, after all, made a 
point of thanking the Chinese for their 
technical help on the bomb. 


Suddenly, a world long decompressed 
from the Cold War seemed to be back on 
the brink. Only this time. Dr. Strangelove 
had a Chinese fiice. On May 20, the 
House voted overtudielmingly to ban the 
sale and launching of U.S. satellites in 
China. After the Pakistani tests. Congress 
also approved a $2.5 million investigation 
of all technology transfers to China. 
America’s national security, declared 
some politicians, was being sacrificed at 
the altar of commerce. Both Republicans 
and Democrats accused the Clinton 
admmistration of carelessly liberalizing 
high-tech trade with China — encourag^, 
perhaps, by Si million campaign dona- 
tions from the likes of Loral chief Bernard 
L. Schwartz — and engaging Beijing vtith 
a stream of deals that were helping to 
transform vdiat is still a large developing 
nation into a 21st century superpower. 

That, anjdiow, was the perception. 
Despite the amicable Clinton-Jiang 
summit in late June, it is a perception 
that has endured. But the truth is that 
such tiiinking is a dangerous anachrorusm. 
Demonizing China, a nation clearly in 


Michael Hirsh is Ntwsvxeks Economics Correspondent, based in 
Washington. 
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The Great Technology Giveaiuay? 


transition, may prove to be a self-fulfilling 
prophecy, unnecessarily fostering Cold 
War II. Even more important. Congress’ 
reaction is a technological throwback; its 
worst mistake is not in misunderstanding 
China, but in failing to comprehend the 
transformation going on before its own 
eyes in the U.S. economy. The idea that 
national security and commercial interests 
trade off — that every time you sell a 
satellite overseas, you make a profit but 
lose a little bit of your military edge — 
harks back to a time when ciA bean 
counters worried over every uptick in 
Soviet technology, and when the U.S. 
defense industry was sequestered in top- 
secret grandeur, spending untold billions 
on weapons designed exclusively for the 
Pentagon, with older-generation models 
going to America’s Cold War allies. 

Today the situation could not be more 
different Quiedy, without most Americans 
noticing, a revolution has turned the U.S. 
defense industry upside down. Very little 
is custom-made for the Pentagon. So 
reduced is its procurement bud^t — at 
about I50 billion, it is now about one- 
third wiut it was at the start of the 
decade — that few defense contractors 
could survive without a heavy diet of 
cottunercial and overseas contracts. As a 
result, by necessity, the defense industry has 
grown civilianized. Now much of the best 

telecommunications — is coming fiom the 
commercial sector. Dual use has become 
the rule and not the exception. Apart 
from a handful of quasi-monopolistic 
contractors like Lockheed Martin 
and Newport News Shipbuilding, “the 
industry is reconstituting itself into a 
commercially oriented business that also 


defimse technology — like naval propulsion, 
electronics, and command-and-control 


happens to have defense customers,” said 
John R. Harbison, a long-time defense 
analyst for Booz, Allen & Hamilton, in 
an interview in June. 


NOBODY BEATS THE WIZ 


What that means is that, more than ever 
before, national security and commerce 
have become mutually reinforcing, not 
competing, interests. America’s defense 
edge is part and parcel of its commercial 
prowess. And that prowess in turn depends 
on exports and a global leadership role 
for American business. Indeed, banning 
Loral, Hughes, and other satellite compa- 
nies fiom competing for business in China 
would probably harm America’s national 
security more than letting their prize tech- 
nologies slip into Beijing’s hands, which, 
in any case, almost never happens. 

This growing reliance on commercial 
technology has been a long-term trend, 
one set in motion well before Bemie 
Schwartz ever met Bill Clinton. And it 
is probably irreversible, given how far 
ahead the commercial sector is already. 
“Once upon a time we had the resources 
in this department to lead the field,” PAul 


G. Kaminski, the former Defense under 
secretary for acquisition and technology, 
told me in an interview shortly before 
he left office last year. “So if something 
interested us like the development of 
transistors or computers in missiles, we 
led the pack in developing it.” Hence, 
for example, the Internet famously began 
as a highly classified data transmission 
network linking U.S. nuclear weapons 
labs. But three decades or so ago that 
balance began to change, and today it has 
become tcx) expensive for the Defense 
Department to build new technology 
from scratch on “milspec,” or military 
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specifications. “I think the amount spent 
on research in the Department of Defense 
was surpassed commercially in 1965,” said 
Kaminski. “The disparity has grown ever 
more since,” especially since the end of 
the Cold War. Kaminski told of sending 
a Defense Science Board task force to 
Bosnia to examine how the U.S. military 
was doing in supplying intelligence to 
forward-based troops. “They said, ‘pretty 
badly,’” he recalled. “They said there were 
better modems in the corner store. So we 
put in place a fix, leasing a transponder on 
a commercial satellite. There was a 3,000- 
fold improvement. The only thing we 
needed was encryption." 

SATELLITES SCHMATELLITES 
Satellites are a good example of how 
dramatically the Cold Wat order has 
been overturned. Once developed largely 
for spying and command and control, 
satellites have become the building 
blocks of an immense new commercial 
space industry. Last year was the first 
time that Vandenbetg Air Force Base 
sent up more commercial than military 
payloads. “The U.S. military is now a 
minority user on its own ramps,” Gil I. 
Klinger, the deputy under secretary of 
defense for space, told my colleague John 
Barry, Newsweek's defense correspondent, 
last spring. “Now we ate chasing furiously 
behind the commercial users.” In fact, 
several of the main U.S. defense satellite 
constellations are nearly obsolete, and 
intelligence sources say the Pentagon 
intends to go commercial to replace them. 

No worry there, you might think; the 
United States is still far and away the 
world leader in this S27 biUion commercial 
industry, which could grow to be worth 
as much as Jiyo billion by 2007. But 


others, like the Europeans, arc close be- 
hind. And competition is intense. About 
1,700 commercial satellite launches are 
projected for the next ten years, and 
there is a nearly three-year global backlog 
for launcher space. At present only four 
countries — the United States, Russia, 
France, and China — supply it. Launch 
schedules are crucial to competitiveness: 
when customers like CNN buy satellites 
or time on satellites fixrm Loral or Hughes, 
they pay for it up front, and they do not 
get revenue until the satellite is aloft. So, 
to stay competitive, sellers like Loral 
need to minimize the time lag between 
purchase and launch. “If you cut our 
guys out of one of four satellite launchers 
in the world, it puts them at a significant 
competitive disadvantage,” William A. 
Reinsch, under secretary of commerce 
for erqxirt administration, said in an inter- 
view in June. “Say the nearest launch 
window is in two years for U.S. satellites, 
and the Germans come in and say, ‘Oh, 
by the way, we’ll launch on China and 
they’ve got a window 9 months firom now.’ 
That’s a 15-month revenue stream I can’t 
get if I buy the American satellite.” 

Some critics point out that more 
countries are planning to offer launch 
services. But few experts dispute that a 
competitive rush is on and that the 
launch bottlenecks are staggering. Any 
loss of business for U.S. satellite companies 
may translate into a lost defense ed^ for 
the Pentagon down the line — especially 
since military and civilian satellite tech- 
nology is so similar. The message is 
plain: to react to the putative threat from 
China by banning satellite sales to that 
country is to cut offUncle Sam’s nose to 
spite his face. There are side benefits to 
America’s commercial dominance as well: 
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U.S. intelligence, for instance, is helped 
£u more if the Chinese military uses U.S. 
commercial satellites than it would be if 
China developed its own hard-wired, 
secure military alternative. 

THE L.L. BEAN THREAT 

The vibrancy of America's industrial 
base, of course, was also key to winning 
die Cold War. The Soviet Union was 
essentially bankrupted out of existence, 
not defeated on the batdeheld. But the 
relationship between economics and 
national security was then an inditect 
one: a strong U.S. economy produced 
the taxes needed to supply the trillions 
of dollars plowed into defense. We ail 
recall the hundreds of contractors who 
in&mously slurped billions from the 


public trough, coughing back $a billion 
stealth bombers and S6oo hammers. Now 
that defense complex has been reduced to 
a handful of supersundvors like Lockheed 
Martin, Boeing, and a few others that 
emerged fiom the flurry of mergers and 
acquisitions in the 1990s. This is one 
reason the United States is helping itself 
to a peace dividend that now includes a 
balanced budget. Indeed, if there is any 
issue Congress should be examining, it is 
whether defense consolidation has gone 
too far. In some platform sectors, like 
heavy tanks and nuclear carriers, only one 
monopoly supplier effectively remains 
where there were once two or mote. That 
is why the Justice Department prevented 
the recent merger of giants Lockheed 
Martin and Northrop Grumman. 
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Another factor driving this revolution — 
and one that is also irreversible — is that 
more and more countries produce the 
same dual-use equipment. Take another 
controversial export case involving state- 
of-the-art machine tool equipment 
made by McDonnell Douglas, which 
was diverted to a Chinese military plant 
in 1995, possibly for cruise missile pro- 
duction. You would not know it from 
the hue and cry in Washington, but the 
Germans had sold the Chinese similar 
milling machines years before. A similar 
critique can be made of the recent con- 
troversy over an encrypted circuit board 
supposedly stolen by the Chinese after 
the 1996 crash of a rocket carrying a Loral 
satellite. In truth, that encryption is so 
old and widespread it is probably worthless. 
One industry survey last fall found that 
653 encryption products were now available 
from 29 different nations. Norman R. 
Augustine, the recently retired head of 
Lockheed-Martin and a key force behind 
the industry’s consolidation, says that much 
of the state-of-the-art technology that 
drives defense is “fungible. I think it’s just 
not possible to keep it in the box anymore.” 

One problem for those who do want 
to keep it in a box is that the line dividing 
military technologies from civilian ones is 
constantly receding. One by one, com- 
mercial uses ate being found for formerly 
military technologies — another peace div- 
idend. Night \dsion goggles are important 
military equipment, covered as munitions 
by the State Department, but they are also 
available in the L.L. Bean catalog. Global 
positioning satellites, once intended for 
guiding ballistic missiles, today ate within 
reach of every baciqiacker and car owner; 
around 250,000 GPS receivers are sold each 
month (although here the government, in 


a national emergency, could seize control 
of the network in a wink). Or consider 
chips hardened to withstand radiation. 
Once devised because the U.S. military 
wanted to protect its satellites from attack, 
today there is a civilian clamor for them. 
Fearing cyclical spikes in solar activity, 
companies hope to use them to preempt 
pager blackouts. 

Just as important, warfare is getting 
increasingly high-tech and computerized, 
and it will only become more so as the 
21st century brings electronic battlefields. 
Silicon Valley is crucial to the military- 
industrial complex of the future. Whereas 
the portion of the Defense Department’s 
R8cD procurement budget devoted to 
electronics was just one percent a couple 
of decades ago, now it is nearly half. 
Computer technology accounts for 
much of this increase. In 1995 the Clinton 
administration authorized an independent 
study, which was followed by an internal 
administration review, that concluded 
that the ability to design and make nuclear 
weapons — a key reason for export controls 
on computers — had long since flown the 
coop. At the same time. Defense Secretary 
William J. Perry came to realize that 
top-grade supercomputers were going to 
be necessary for 21st century warfare — 
determining everything from warhead 
design to weather patterns in die Adriatic 
Sea in the event of a NATO ail strike. But 
“if you examine our high performance 
computer companies, of vdiich there are 
now only seven, every single one of them 
gets more than 50 percent of its revenues 
from exports,” says Reinsch. “Perry under- 
stood that if you rely on the Pentagon as 
your computer market you’re going to 
go broke. The only way these guys are 
going to stay in business and make new- 
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generation products that the Pentagon 
can buy is if they’re out in the marketplace 
leading the way in exports.” Clinton, as a 
result, has constantly raised the export 
threshold for supercomputers, allowing 
more and more powerful machines to be 
sold abroad without a license. 

THE LAST SUPPER 

One of the great ironies of the satellite 
scandal is that the Pentagon has been 
.portrayed by press reports as the agency 
most worried by the national security 
threat allegedly posed by Loral and 
Hughes. But it was former Pentagon 
chief Perry who was the brains behind 
putting defense technologies up for sale. 

It was Perry, then deputy defense secretary, 
who one night in 1993 gathered the 
biggest names in the arms industry and 
announced, at what became known as 
the Last Supper, that about half of them 
would soon disappear from the Pentagons 
payroll, victims of post-Cold War budget 
cuts. Then, in June 1994, Perry issued a 
momentous memo maldng commercial 
rather than militaiy spediications the 
norm for Pentagon purchases. That same 
year he oversaw the dissolution of Cocom, 
the Soviet-era Coordinating Committee 
for Multilateral Export Controls, and 
opened the way to the overseas sales of 
almost all computer and telecommunica- 
tions equipment without export licenses. 
Such licenses once would have made these 
deals illegal without U.S. government 
approval. As a result, the number of licens- 
ing cases involving potentially dual-use 
technology abroad dropped from a high of 
uo,ooo per year under the Reagan admin- 
istration to fewer than 9,000 cases by 1996. 

The Perry doctrine enraged the hard- 
liners in the Defense Department’s Defense 


Technology Security Administration, a 
Reagan-era body whose raison d’etre is 
keeping wraps on dual-use goods — and 
which has been mainly responsible for 
press leaks on the satellite issue. But the 
policy met with a willing audience at the 
Commerce Department, which began 
trumpeting export promotion under 
Secretary Ron Brown. Hence the seeds 
of the current scandal were sown: U.S. 
exporters loved the pohcy and began 
pushing for ever more market openings. 
Under intense corporate lobbying — by 
such big political donors and high-tech 
China exporters as Hughes, AT&T, 
Loral, and United Technologies — more 
and more equipment was redefined as 
dual-use rather than munitions, which 
puts it under the perusal of the State 
Department, and moved to a fast-track 
approval process at Commerce. 

Perry had simply decided that in the 
post-Cold War era it was all but impossible 
to halt the global flow of dual-use tech- 
nologies, and that America had to go with 
the flow to keep its industries alive. True, 
many of these new exports dovetailed 
nicely with Beijing’s high-tech wish list, 
but they also made eminent sense in the 
new commercialized environment. Indeed, 
there was not much choice. “I think the 
criterion [for export control] is whether 
or not we are sole possessors of the tech- 
nology,” Perry explained in an interview 
last year, before the current controversy 
erupted. “There was a consistent effort 
during the whole time I was in the govern- 
ment to reach agreement with Western 
countries on a unified approach to tech- 
nology control . . . We did not have much 
success.” At the same time export fever 
began to overtake the Europeans, who 
were anxious about their own ailing defense 
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industries. The government did manage 
to replace Cocom in 1996 with something 
caOed the Wassenaar arrangement, a less 
formal accord among Western countries 
for keeping a lid on military-related ex- 
ports. But with the exception of a few 
targeted rogue nations such as Libya, it 
is proving to be mostly a paper tiger. 

ONE STEP AHEAD 

None of this means the West should just 
drop efforts at export control. Nor does 
it belie the potential seriousness of the 
allegation against Loral and Hughes. Both 
weapons sales and dual-use technologies 
that clearly contribute to missile, nuclear, 
or biochemical weapons production need 
to be assiduously monitored, even with 
all the headaches of doing so. And they 
are, at least under law: if it is true that 
these two satellite companies evaded the 
required State Department approval before 
passing on missile guidance information 
to China, that would be an indisputable 
violation of U.S. export controls. But it is 
important to remember that for now the 
allegation remains a singular one, hardly 
something that would justify banning all 
satellite exports to China. Contrary to 
reports, the Pentagon is sharply divided 
over whether national security was 
harmed at all. 

The changing nature of technology and 
geopolitics also means that Washington 
must keep refining export controls. A 
General Accounting Office report on 
another dual-use controversy — involving 
the sale of AT8cT switching equipment 
to a People’s Liberation Army^affiliated 
company — criticized the Commerce 
Department on this score in November 
1996. It pointed out that, under loosened 
Commerce rules, companies are pretty 


much on their own in determining who 
is a civilian versus a military end user in 
China, but it concluded that Commerce 
does not “offer any guidance on how” to 
do so. Before high-tech exports were 
liberalized, when companies were forced 
to apply for an export license, the gao 
report noted, the Commerce Department 
would conduct its own review “using 
available government resources such as 
embassy personnel and intelligence re- 
ports.” It noted that exporters “do not 
have such resources available to them 
when making a civil end-user determina- 
tion.” Commerce has responded, creating 
a blacklist with 28 suspect end users. 

The larger point, however, is that 
America’s export control policy can no 
longer be to close down its borders. In 
an era of open technology transfer, the 
centerpiece of any viable strategy must 
be to keep one’s industries running faster 
than the next economy’s. U.S. policy 
should be twofold: to promote U.S. 
commercial leadership in dual-use 
technologies, and to maintain tough 
but reasonable export monitoring that 
will slow — even if it does not stop — 
the acquisition of those technologies 
by potential enemies. America’s national 
security will be assured as long as the 
Chinese (or, through them, the Iranians 
or Pakistanis) are always lagging a few 
product cycles behind. But that is about 
all that can be done. “There’s going to 
be a lot more slippage and leakage,” says 
former Assistant Defense Secretary 
Joseph S. Nye, Jr. “This technology is 
broadly shared, and the sense of threat 
[about China] isn’t broadly shared.” 

Unfortunately, the Clinton administra- 
tion has done a wretched job of articulating 
this new reality. It is another example of 
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how the president’s essential centrism — 
and, perhaps, the taint of scandal — have 
prevented him from breaking new con- 
ceptual ground and seizing the mantle 
of real leadership. FDR described great 
presidents as “leaders of thought at times 
when certain ideas in the life of the nation 
had to be clarified.” Clinton continues to 
justify his technology transfer pohey by 
pointing out that he is only following 
what President Bush did, an irony much 
noted to his detriment, since Clinton 
notoriously attacked Bush’s engagement 
policy, and by focusing on the negative — 
in other words, what the United States 
does not allow China to have. Or he 
makes the same droning point about 
China trade being crucial to U.S. 
jobs. What no one has explained is that 
trade — yes, trade with China — may well 
be crucial to U.S. national security. Maybe 
that is why the comprehension of this 
new paradigm is sinking in so slowly, 
especially on Capitol Hill.® 
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